move cookie key as env variable

Fix issue #12