Set cookies to be secure and httponly.