Make Cookie key settable by config system and/or constant, and dont try and create one if unset
Add some documentation