Secure cookie. Added config COOKIE_HTTP_ONLY and COOKIE_SECURE