Support for Secure & HttpOnly session cookie flags;