#42 - generating random cookie secret at server start up so old cookies get invalidated