added session secret