Using config for session secret.
Including all routes under index.js.