Cookie has Secure & HttpOnly flags and a domain set.

Review if you can, deploy to production if you're feeling adventurous.

[#78457654]