changed the cookie encoding secret