secure and httponly added

@dustismo : merge me