add a session secret key from the environment