fixed bug where multiple sessions were being created - fix was to add the session secret into the cookie parser