Add secure flag to cookie