trying to add session secret