diff --git a/app.js b/app.js
index e7dfa39ffde..d7cc880b993 100644
--- a/app.js
+++ b/app.js
@@ -40,7 +40,7 @@ app.set('view engine', 'ejs');
 app.use(logger('dev'));
 app.use(methodOverride());
 app.use(session({
-  secret: 'keyboard cat',
+  secret: process.env.SESSION_SECRET,
   name: 'connect.sid',
   cookie: { path: '/' }
 }))
diff --git a/package.json b/package.json
index d5f9362a36d..67b0b9c635c 100644
--- a/package.json
+++ b/package.json
@@ -29,18 +29,19 @@
     "express-session": "^1.17.2",
     "file-type": "^8.1.0",
     "hbs": "^4.0.4",
-    "humanize-ms": "1.0.1",
+    "tap":"11.1.5",
+    "humanize-ms": "1.0.0",
     "jquery": "^2.2.4",
     "lodash": "4.17.4",
     "marked": "0.3.5",
     "method-override": "latest",
     "moment": "2.15.1",
     "mongodb": "^3.5.9",
-    "mongoose": "4.2.4",
+    "mongoose": "4.2.0",
     "morgan": "latest",
     "ms": "^0.7.1",
     "mysql": "^2.18.1",
-    "npmconf": "0.0.24",
+    "npmconf": "0.0.20",
     "optional": "^0.1.3",
     "st": "0.2.4",
     "stream-buffers": "^3.0.1",