Level up the cookie security

[ArtyomVancyan]

Motivation:

This fixes #27 issue reported by @vokimon. It uses the Secure attribute with an appropriate value based on allow_http and strictly sets the Httponly for the authorization cookie.

All Submissions:

• Have you followed the guidelines in our Contributing document?
• Have you checked to ensure there aren't other open Pull Requests for the same update/change?

Changes to Core Features:

• Have you added an explanation of what your changes do and why you'd like us to include them?
• Have you updated the documentation related to the changes you have made?
• Have you written new tests for your core changes, as applicable?
• Have you successfully run tests with your changes locally?