Your cookie secret should be in an env variable

[shiryz]

https://github.com/facn5/Battuta/blob/master/src/router.js#L8