restrict secure cookies to https
bump (v0.1.3)