Proper SESSION_SECRET in ENV variable.