more layout work
set session secret