update ff config, add cookie secure