upgrading to latest @Leaflet version and adding session secret for rack