Removing session secret token from repo (and changing it)