Moved session secret to config file.