adding setting to change session secure