generate cookie_key once, inherit for all contexts