When the HT user application does not initialize the session secret before starting the first acceptor, a warning is emitted.
However neither *session-secret* nor reset-session-secret are exported from the package, so there's no clean way to handle this.
I think it should be initialized automatically without any warning (just mention it in the manual) and the symbols should be exported.
Leslie