Move cookie and session settings to config