adds cookie secret