Cookies are now httponly and secure (if on HTTPS)
Updated documentation
Version bump 1.0.1