Try session cache store, move secret key to instance