_session": renaming the cookie would sign everyone out. | | Sessions are encrypted unless SESSION_ENCRYPT=false: they hold the keys | of the password shares a recipient unlocked, which must never sit | readable in the sessions table. Every other key comes from the | framework's defaults. | */ return [ 'encrypt' => env('SESSION_ENCRYPT', true), 'cookie' => env( 'SESSION_COOKIE', Str::slug((string) env('APP_NAME', 'laravel')).'-session' ), ];