chore: fixed open project (no need to redirect), fixed session in async calc, moved secret_key into config