Updated SESSION_KEY comment and repositioned S3_REGION comment

Author: vignesh-sankaran

.env.sample

@@ -6,9 +6,9 @@ export DATABASE_URL=
 # If you are running a mirror of crates.io, uncomment this line.
 # export MIRROR=1
 
-# Key to sign and encrypt cookies with. Change this to a long, random string
-# for production.
-export SESSION_KEY=badkey
+# Key to sign and encrypt cookies with. Must be at least 32 bytes. Change this 
+# to a long, random string for production.
+export SESSION_KEY=badkeyabcdefghijklmnopqrstuvwxyzabcdef
 
 # If you will be running the tests, set this to another database that you
 # have created. For example, if your test database is named
@@ -22,7 +22,8 @@ export TEST_DATABASE_URL=
 # export S3_BUCKET=
 # export S3_ACCESS_KEY=
 # export S3_SECRET_KEY=
-# export S3_REGION=      # not needed if the S3 bucket is in US standard
+# not needed if the S3 bucket is in US standard
+# export S3_REGION=
 
 # Remote and local locations of the registry index. You can leave these to
 # use a `tmp` subdirectory of the working directory, which is what the