added cookie config for safer cookies