persist notebook server cookie secret in security dir

prevents loss of login after relaunching the notebook server

closes #6075
Is there a reason why this returns the secret? It is not used