tracking latest dump
backup action as POST
setting session secret to avoid warning