Hide cookie token from git in .secret