fix of cookie secret typo