code: function verifyConfiguration (req, sessionKey, cookie) {
    if (!getSecretBag(req, sessionKey, cookie)) {
      return false
    }
  
    if (cookie && cookie.signed && !req.secret) {
      return false
    }
  
    return true
  }
docs: Verify the configuration against the request.
  @private