Set secure and httponly properties on session cookie
Merge pull request #193 from jbarrett/secure-cookie

Set secure and httponly properties on session cookie