Use production secret for cookies and send config with api/info