Remove session secret. For some reason, dev machine can't parse cookie encrypted