diff --git a/src/createApp.js b/src/createApp.js
index 68ad950..8a29655 100644
--- a/src/createApp.js
+++ b/src/createApp.js
@@ -21,7 +21,7 @@ function createApp() {
     app.use(require('method-override')());
     app.use(express.static(__dirname + '/../public'));
     app.use(session({
-        secret: config.secret,
+        secret: process.env.SESSION_SECRET || config.secret,
         cookie: { maxAge: config.session_lifetime },
         resave: false,
         saveUninitialized: false