Allow cookie configs to be configured via env. config