Session cookie updates

- Added missing part in cookie-domain settting
- Added secure session cookie flag