Added Secure- and HttpOnly-flag to Cookie. Tracking sessions not in URL