had to set session secret to get it to work with puma