Hard-code a cookie secret (I know, I know)