generate session secret when package is installed