UserConfig::$SESSION_SECRET variable now tested for non-default value (closes issue #120)