added protected configureCookiePolicy method to allow change it in subclasses