moved session secret