remove test for session secret