Add secure flag to servlet cookie