persist notebook server cookie secret in security dir

prevents loss of login after relaunching the notebook server

closes #6075
Merge pull request #6076 from minrk/cookie-secret

persist notebook server cookie secret in security dir