setFrom support email with upper case letter, session cookie set secure