session settings in secrets.yml should be used.