changes to secure cookie settings