HUE-1529 [core] cookies should be secure