added secure cookies