Add HttpOnly to cookies. Added a few http headers to help mitigate potential security issues.