session settings in secrets.yml should be used.
Merge pull request #132 from botandrose/fix_secret_token_settings

Bugfix: SECRETS.session_name and .session_secret have no effect