Sensible defaults for cookie secret and password encryption key