Store a single secret across an install/configuration

[alexander-bauer]

Flask uses an app-wide secret for many purposes. Currently, a new secret is generated each time the server starts, so sessions will not persist.