update secret to match auth app
Merge pull request #9 from FooFoBerry/cookies

update secret to match auth app so signed cookies can be read