fix abstract typo
add support for forcing the secure and HttpOnly flags