Remove ability to set COOKIE_SECRET option