Move session_secret to config.yml