diff --git a/.travis.yml b/.travis.yml
index 4843622..7ca9771 100644
--- a/.travis.yml
+++ b/.travis.yml
@@ -1,3 +1,4 @@
+env: SESSION_SECRET=foobar
 before_script:
   - psql -c 'create database descartes;' -U postgres
 
diff --git a/Gemfile b/Gemfile
index b21cd31..a5792b2 100644
--- a/Gemfile
+++ b/Gemfile
@@ -7,7 +7,7 @@ gem "pg"
 gem "sequel"
 gem "omniauth"
 gem 'omniauth-google-apps'
-gem "sinatra_auth_github", "0.9.0"
+gem "sinatra_auth_github", "0.13.3"
 gem "openid-redis-store"
 gem "rack-canonical-host"
 gem "rack-ssl-enforcer"
diff --git a/Gemfile.lock b/Gemfile.lock
index 7e1e7ed..25f42fc 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -6,9 +6,9 @@ GEM
     daemons (1.1.9)
     diff-lcs (1.1.3)
     eventmachine (1.0.0)
-    faraday (0.8.4)
+    faraday (0.8.6)
       multipart-post (~> 1.1)
-    faraday_middleware (0.8.8)
+    faraday_middleware (0.9.0)
       faraday (>= 0.7.4, < 0.9)
     foreman (0.59.0)
       thor (>= 0.13.6)
@@ -17,17 +17,16 @@ GEM
     json (1.7.5)
     method_source (0.8)
     mime-types (1.19)
-    multi_json (1.3.6)
-    multipart-post (1.1.5)
-    oauth2 (0.5.2)
-      faraday (~> 0.7)
-      multi_json (~> 1.0)
-    octokit (1.9.4)
+    multi_json (1.6.1)
+    multipart-post (1.2.0)
+    netrc (0.7.7)
+    octokit (1.23.0)
       addressable (~> 2.2)
       faraday (~> 0.8)
-      faraday_middleware (~> 0.8)
+      faraday_middleware (~> 0.9)
       hashie (~> 1.2)
       multi_json (~> 1.3)
+      netrc (~> 0.7.7)
     omniauth (1.1.1)
       hashie (~> 1.2)
       rack
@@ -80,10 +79,9 @@ GEM
       rack (~> 1.3, >= 1.3.4)
       rack-protection (~> 1.1, >= 1.1.2)
       tilt (~> 1.3, >= 1.3.3)
-    sinatra_auth_github (0.9.0)
+    sinatra_auth_github (0.13.3)
       sinatra (~> 1.0)
-      warden-github (~> 0.9.0)
-      yajl-ruby (~> 1.1)
+      warden-github (~> 0.13.1)
     slop (3.3.3)
     thin (1.2.10)
       daemons (>= 1.0.9)
@@ -94,14 +92,9 @@ GEM
     tzinfo (0.3.35)
     warden (1.2.1)
       rack (>= 1.0)
-    warden-github (0.9.1)
-      json (~> 1.5)
-      oauth2 (~> 0.5.2)
-      octokit (~> 1.9.4)
-      rest-client (~> 1.6.1)
-      warden (~> 1.0)
-      yajl-ruby (~> 1.1)
-    yajl-ruby (1.1.0)
+    warden-github (0.13.2)
+      octokit (>= 1.22.0)
+      warden (> 1.0)
 
 PLATFORMS
   ruby
@@ -124,5 +117,5 @@ DEPENDENCIES
   rufus-scheduler
   sequel
   sinatra (= 1.3.1)
-  sinatra_auth_github (= 0.9.0)
+  sinatra_auth_github (= 0.13.3)
   thin (= 1.2.10)
diff --git a/lib/descartes/routes/setup.rb b/lib/descartes/routes/setup.rb
index 19bd292..2b45b22 100644
--- a/lib/descartes/routes/setup.rb
+++ b/lib/descartes/routes/setup.rb
@@ -6,6 +6,7 @@ class Web < Sinatra::Base
       disable :raise_errors if Config.rack_env.eql?("production")
       disable :show_exceptions if Config.rack_env.eql?("production")
       use Rack::SslEnforcer if Config.force_https
+      set :session_secret, Config.session_secret
     end
 
     before do