remove session secret token from version control