updated session to use secret