secure-cookies: Use secure cookies over HTTPS

@aboudreault Want to review?