removed cookie secret