added session secret to suppress warning.

This may kill "No secret option provided to Rack::Session::Cookie" warning...