Use a password protected redis for session storage
This is used by chwala which used local storage so far.