docs: mention session secret
chore: build after postinstall