Get session secret from env instead of hardcoding

server/account_test.go

@@ -27,8 +27,10 @@ func TestRegisterUser(t *testing.T) { //nolint:funlen
 	}
 
 	h := Handler{
-		Service:             database,
-		TokenVerifier:       &jwt.TokenVerifier{},
+		Service: database,
+		TokenVerifier: &jwt.TokenVerifier{
+			Secret: "this_is_my_demo_secret_for_unit_tests",
+		},
 		CredentialsVerifier: &bcrypt.Verifier{},
 	}