Add session handling and optional reCaptcha support

.env.example

@@ -29,6 +29,14 @@ ADMIN_PASS="flux"
 # 4. Put your solder API URL (http[s]://example.com/api/) in and link it.
 API_KEY=""
 
+# (REQUIRED) Session Secret Key. CHANGE THIS!!!!
+# This is the key that will be used to encrypt sessions. It is recommended that you make it secure.
+# You can generate one using the following steps:
+# 1. Go to https://www.lastpass.com/features/password-generator#generatorTool
+# 2. Set password length to 50 and leave it set to all characters
+# 3. Copy the password here.
+SESSION_KEY="(/jg~WBd4%+cXt9vp'&/lN-;mynl:N}v£D!0I5V04tcpYb&;.F"
+
 # (Optional) Default Author Name (for custom files)
 # This is the name that will be pre-filled when you go to upload custom files for a modpack.
 # Unset behaviour: You will need to specify the author every time.
@@ -49,3 +57,13 @@ API_RATE_REQUESTS=1000
 # The amount of time (in milliseconds) that the request limit is applied to.
 # Unset behaviour: Defaults to 60000
 API_RATE_WINDOW=60000
+
+# --- Google ReCaptcha ---
+# TechnicFlux comes with Google ReCaptcha support.
+# When configured, this will enable captcha protection on your login page.
+
+# (Optional) Google ReCaptcha Credentials
+# You can obtain these credentials at https://www.google.com/recaptcha/admin/create
+# Unset behaviour: ReCaptcha is disabled on login page.
+#CAPTCHA_SITE_KEY=""
+#CAPTCHA_SITE_SECRET=""