Remove hardcoded fallback secret that allowed sessions to be signed with a well-known value if the env var was unset. Co-Authored-By: Paperclip <noreply@paperclip.ing>