Set session secret to env var, add GA