moved express.session key to untracked config file, changed key to something different.