Fix HTTP 500 when missing session on logout
Allow SECRET_KEY to pull from environ
Add note about SECRET_KEY to README