Set session secret via config/session_secret

Fix #27