use session secret