Updated config-sample to have scopes
upgraded packages
Store session secret in config