Default to using httponly cookie option
httponly
Default to using secure cookie option for requests over HTTPS
secure
Allow customization of cookie options using the sessionBaseCookie method
sessionBaseCookie