Missing instruction for `secure` option to be added to session config file