secure cookie

[#75]