Move cookie encryption key to core.php