Used php ini to set secure, httponly cookies