Request::cookieValidationKey must be explicitly specified now.