Added configuration options for httponly and secure