Fixed cookie age, HTTPS for remote javascript assets.