Use a cookie library that support setting them secure