make cookie.httponly and cookie.secure options apply to the flash
cookie as well.