Require Plack::Middleware::Session 0.23

Plack::Middleware::Session::Cookie 0.23+ dies if no secret is provided,
closing a potential vunlerability. Tests now specify a secret.