make cookie encryption key and algorithm configurable