Made cookies secure and HTTP-only by default