Put cookie secret in config