9a68fb7b0c
App refuses to start without SESSION_SECRET regardless of NODE_ENV. Removes risk of accidental insecure deployment when NODE_ENV is not explicitly set to production.