Make secret and signing of cookies optional