cleanup, added cookie secret