make session store point to config settings

I spoke with Alan Rosenthal, our sysadmin, and he pointed out that the values for the session cookie name and secret tokens were hard-coded when they should point to config/environments/{development.rb, test.rb, production.rb}.