Use session secret and remove cookieParser.secret