Read secret key from ini file

Similar to upstream change with two differences:

* I used the [session] section that was already there, seemed more appropriate place
* If the secret key is missing, I just exit rather than generate a random one