adding cookie secret to readme