use cookie-parser, add secret command param, update docs