Good call.

Did you discuss that with Ben? I'm all for one secret, but I got the impression that it's bad to reuse secrets.

I'll remove this and update node-client-sessions' README after hearing back and/or confirming with Ben.

The README shows how to have a second cookie and explicitly uses a second secret.