Warn if cookie secret is missing