update session secret and test