diff --git a/.envdev b/.envdev
index 9c6b294..6e4b945 100644
--- a/.envdev
+++ b/.envdev
@@ -10,4 +10,6 @@ DB_HOSTNAME=127.0.0.1
 DB_DATABASE=template
 DB_USERNAME=template
 DB_PASSWORD=pikachu
-DB_TIMEZONE=Australia/Sydney
\ No newline at end of file
+DB_TIMEZONE=Australia/Sydney
+
+SESSION_SECRET=secret
\ No newline at end of file
diff --git a/README.md b/README.md
index 2757cd0..624b9be 100644
--- a/README.md
+++ b/README.md
@@ -16,6 +16,14 @@ To set up this template, please ensure mariadb is running on the host computer,
 
 This should get the template working in development mode.
 
+# Microservices
+
+There are external components to this template referred to as "microservices". These can be omitted entirely by simply removing the React component that accesses them.
+
+* News Server: https://github.com/krgamestudios/news-server
+
+TODO: more info.
+
 # TODO list
 
 - Account system
@@ -25,15 +33,18 @@ This should get the template working in development mode.
 	- ~~logout (with cookies)~~
 	- ~~account deletion~~
 	- ~~annoying "This site uses cookies" message~~
-	- CSS template?
+- News blog system (microservice)
+	- ~~build the microservice to provide the news feed~~
+	- access an external news feed
+	- built-in panel for publishing and editing news (admin panel)
 - Administration Panel
 	- Exclusive to admin accounts
 	- ban/unban accounts
 	- inspect user data
-- News blog system
-	- access an external news feed
-	- build the microservice to provide the news feed
-- Chat system
+- Chat system (microservice?)
+	- Based on usernames
+	- Chat logs
+	- Direct Messages & rooms
 - Achievements?
 
 # Email settings
diff --git a/server/server.js b/server/server.js
index fdb3214..375c6b3 100644
--- a/server/server.js
+++ b/server/server.js
@@ -14,7 +14,7 @@ const session = require('express-session');
 
 app.use(formidable());
 app.use(cookieParser());
-app.use(session({ secret: 'secret', resave: true, saveUninitialized: true }));
+app.use(session({ secret: process.env.SESSION_SECRET, resave: true, saveUninitialized: true }));
 
 //database connection
 const database = require('./database');