make session store configurable via env var SESSION_STORE
set default in configuration.rb