fixed security issue and cookie secret bug
Merge pull request #3 from tstrimple/master

fixed security issue and cookie secret bug