add requirement vnvironment variable (SESSION_SECRET) to README.md