Add HTTPOnly and Secure flags to cookies
use template variable