Stop setting a default cookie

Like passwords, secret cookies shouldn't have defaults. This
change removes the default and hard fails when a value is needed and
not set.
Update README