generate session secret ans use for authentication, handle callback correctly and pupulate uid with conceptid