fix: display container list also on api page
fix: we should generate the session_secret before that config obj is initialized (in lwp.utils)