add httponly and secure flags for cookies created by socketio