Make cookie parser secret configurable via environment variable.