Make is possible to override cookie-params

i.e, make is possible to do:
giallo_session:new(Req0, [{http_only, true}, {secure, true}, {path,
<<"/">>}])