Enable secure cookie and add https header info