Move cookie secret to a file