Set SSP cookies to secure and httponly by default.
Merge pull request #5 from thijskh/master

Set SSP cookies to secure and httponly by default.