leapcode/leap_web — pull request #39 by azul (2013-03-15 10:35:33+00:00)
Title: fetch secret token for signing cookies from config

We had the secret itself in the git repo. Not a good idea at all. It's still set to sth. known in development and test environments. But production deploy needs to set this up in the config.