Bug Fix: Don't expose the Session Secret directly