- make cookies secure