Add SESSION_COOKIE_SECURE setting.
Lint with flake8 before tests.