Make cookie secret configurable