diff --git a/package.dhall b/package.dhall
index 2310f91..bb88d06 100644
--- a/package.dhall
+++ b/package.dhall
@@ -1,10 +1,10 @@
 { Schema =
       ./schema.dhall
-        sha256:12bd172676c7db8ed849f74718378adead421710f71fb7d92f3075c2489ee5c2
+        sha256:0695554541b911bb3ee4b3605ba01df4caab6533da0d4fd32e9d774c41d19d01
     ? ./schema.dhall
 , Schema/validate =
       ./validate.dhall
-        sha256:28399e4a2c2e00c7ddcb0e071a1d0bd1f3fa334b3b3ae8a34ecf5a9fb89f608d
+        sha256:0aef242b8f9e63d36fcf407b71f8a6369bbcb832125c39e61f92b95b7027fc77
     ? ./validate.dhall
 , Prelude =
     ./prelude.dhall
diff --git a/schema.dhall b/schema.dhall
index ae7ec2d..1ff468b 100644
--- a/schema.dhall
+++ b/schema.dhall
@@ -6,7 +6,11 @@ let Schema =
           , AppName : Text
           , LiveMode : Bool
           , DevelMode : Bool
-          , Session : { CookieName : Optional Text, CookieSecret : Text }
+          , Session :
+              { CookieName : Text
+              , CookieAuthSecret : Text
+              , CookieEncrSecret : Text
+              }
           , Logger : { JSON : Bool, Fmt : Optional Text }
           , InitialAdminPassword : Text
           , Registration : { Allowed : Bool }
@@ -18,7 +22,11 @@ let Schema =
           , AppName = "pcmt"
           , LiveMode = False
           , DevelMode = False
-          , Session = { CookieName = None Text, CookieSecret = "secretz" }
+          , Session =
+            { CookieName = "pcmt_session"
+            , CookieAuthSecret = ""
+            , CookieEncrSecret = ""
+            }
           , Logger = { JSON = True, Fmt = None Text }
           , InitialAdminPassword =
               -- | used for the first admin, forced change on first login.
diff --git a/validate.dhall b/validate.dhall
index eb25a98..a8b8a60 100644
--- a/validate.dhall
+++ b/validate.dhall
@@ -5,7 +5,7 @@ let Prelude =
 
 let Schema =
         ./schema.dhall
-          sha256:12bd172676c7db8ed849f74718378adead421710f71fb7d92f3075c2489ee5c2
+          sha256:0695554541b911bb3ee4b3605ba01df4caab6533da0d4fd32e9d774c41d19d01
       ? ./schema.dhall
 
 let Schema/validate