Session object now sets session cookie parameters for enhanced security