Fix/session secret

- [ ] Read for merge

Initial code to move people over to SSL.

Todo:

- [ ] Ensure general flash message still work
- [ ] What happens when session is expired during a save process
- [ ] Ensure flash message on subsidiary pages