https://ubuntuask.com/blog/how-to-implement-secure-cookie-attributes-in-https