persist notebook server cookie secret in security dir

prevents loss of login after relaunching the notebook server

closes #6075