- added stripped configuration file
- added session secret as environment variable