adds secret to sign cookies