Fix/session secret

- [ ] Read for merge

Initial code to move people over to SSL.

Todo:

- [x] Ensure general flash message still work
- [x] What happens when session is expired during a save process
- [x] Ensure flash message on subsidiary pages