Merge branch 'master' into revert-to-hmac

.gitignore

@@ -1,2 +1,3 @@
 node_modules
 src/public/main.js
+src/.secret

readme.md

@@ -8,6 +8,8 @@ Simple encrypted web chat. Powered by [socket.io](http://socket.io) and the [web
     npm install
     gulp start
 
+Create a **.secret** file in **/src** folder with a your session secret. It doesn't matter what it is- just keep it private.
+
 Darkwire is now running on `http://localhost:3000`
 
 ### Deployment

src/app.js

@@ -9,6 +9,7 @@ import _ from 'underscore';
 import Room from './room';
 import favicon from 'serve-favicon';
 import compression from 'compression';
+import fs from 'fs';
 
 const app = express();
 const server = http.createServer(app);
@@ -20,7 +21,7 @@ const sessionMiddleware = session({
     port: 6379,
     db: 2
   }),
-  secret: 'hay',
+  secret: fs.readFileSync(__dirname + '/.secret', 'UTF-8'),
   resave: true,
   saveUninitialized: true
 });