Added secret to sessions.

When registering sessions to user we want to have some kind of authorisation - when we pass secret along with session information during session creation and client stores it, it'll be enough to authorise 'binding' action.