change session cookie name, secret token