- set additional cookies for session: Max-Age: 86400; Secure; HttpOnly