set default SESSION_SECRET #9
update README #9