Pull cookie signing key from environment as well.