Configured all cookies created by the site to be httpOnly and secure