add secret key for session purpose