added automatic cookie secure flag