moved session secret to config file

2 files changed, 3 insertions, 2 deletions

diff --git a/config/config.js b/config/config.js
index f71fbc9..3637cf3 100644
--- a/config/config.js
+++ b/config/config.js
@@ -22,7 +22,8 @@ module.exports = {
         email: {
             server: 'localhost',
             ssl: false
-        }
+        },
+        sessionSecret: 'lsdrghoi4hgqio42nqf2uqi32f3bilu23fl23b',
     }
 }
 
diff --git a/config/express.js b/config/express.js
index 4c09b17..c35a0d8 100644
--- a/config/express.js
+++ b/config/express.js
@@ -30,7 +30,7 @@ module.exports = function (app, config, passport) {
 
         app.use(express.methodOverride());
 
-        app.use(express.session({ secret: 'lsdrghoi4hgqio42nqf2uqi32f3bilu23fl23b' }));
+        app.use(express.session({ secret: config.sessionSecret }));
 
         // use passport session
         app.use(passport.initialize());