debugging
increased session timeout and added secret