Move session secret to config
Refactoring