Make cookie only available during HTTP(S) requests.
Add and configure ``django-security``.

https://github.com/carljm/django-secure

Django security adds several response headers to improve the
site security.