Use sha256 hash of application.Configuration.Secret for Cookie MAC Key.