fix(http): Allow setting your own cookie parser secret

By doing: `ss.session.options.secret = 'foo'`.

This pull request doesn't rebuild docs, let me know if I should also include that!