Minor changes to Congratulations page and debug area.
Changed so that cookies (when using them as storage for the Flash) are HTTPOnly and secure (when applicable) (backport).