Remove the session secret and read it from ENV