Change to make segment cookie http only