Moved session secret to env variable.
Updated rails to 3.2.17.