Ignore precompiled assets in public/assets
Serve all cookies securely in production