added settings for secure cookies