set cookie with secure flag
cookie and upload auth changes