set value for session_secret