Handle the cookie secret in the provider; version 0.2