added comment to change session secret