todo stub in REPL
Added default session and io config to boilerplates.  Especially the part about a session secret, which is required now.
Comment cleanup.
Generate session secret when new app is created. (Can't believe that worked on the first try.)