moving cookie config into app specific config files