Respect Flask SESSION_COOKIE_HTTPONLY and SESSION_COOKIE_SECURE flags.