Fetch cookie secret from env variable if available.
Disregard *.env files