Closes #30 to refactor out cookie auth secret into the gitignored config file.