remove secret from hashed cookie value