Make signed_request cookie secure