Moved the cookie key name into the config to make it more obvious that it's something that can be customized.