Add setting "cookies.secure" to allow for better cookie security when using https only