break out the secret key into a new var so it's obvious

secretKey := []byte("secret123")
store := sessions.NewCookieStore(secretKey)