Use identityCookie params(domain, path, httpOnly, secure) when renew