@whtsky
I thought tornado.web.RequestHandler.get_secure_cookie() will use it
some configuration should be there ...right?