Security Update

Enforces cookie store to be http only to mitigate session highjacking (specifically sidejacking)