Adding ability to set secure flag

This adds another optional argument that marks cookies as `secure`, meaning they may only be sent over HTTPS.