Make session auth cookie name configurable