I don't know anything about cryptography. I'm wondering what the session secret is.
I see code like this:
app.use(express.session({ store: mongoStore({ url: app.set('db-uri') }), secret: 'topsecret' }));
What is the secret and should I change it?