Remove mongodb uri from connect-mongo constructor
Move session secret to config