Adds default session_secret, closes #2