generalizing secrets file to include session secret