Changed defaults to use secure=true rather than false