Fix permission to show_gcx_profile
Remove session secret from source control and put it in a yml config file
Merge branch 'c4c.staging.hotfix' into c4c.staging