Check for secret cookie token in production.