fix cookie secret