update session secret