harden hapi config cookie stuff