specify session secret on startup

This will allow sessions to persist across drone restarts.

Since the secret is used for session signing, I required the secret to be at least 30 characters, but it's somewhat arbitrary.