Adds session middleware

Configures app to use session middleware. Session secret is set
dynamically in config.js, allowing for different settings
depending on the environment variable.