try Rack::Session instead
move the date lower
fixed cookie secret. yea
sample settings