- Change from hashKeyFile/blockKeyFile inside sessionDriver to sessionKeysFile at auth config level - Update ExternalSecret to generate session-keys.json with both hashKey and encryptKey in correct JSON format - Fix securecookie validation error during OIDC callback