Add default session secret if relevant environment variable is nil