session key in settings file OR generate temp key for instance