Warn if using ephemeral cookie secrets
Merge pull request #39 from callahad/secretwarning

Warn if using ephemeral cookie secrets