hide and change session secret