It sets same cookie parameters as setSecureCookie.

forgetSecureCookie didn't set httpOnly parameter on cookie, which could
make some new browsers ignore it.

You can set domain name for cookies in auth and cookie session
snaplets. This is useful when you want to make stored cookies available
to sub-domains.

For example: If you set cookie domain to `.example.com`, browser will
send it with requests to sub-domains like
`api.example.com`,`wiki.example.com` or `sub.subdomain.example.com`.

This is a breaking change for public Api.

Some snaplets which initialize AuthManager record with named fields like
AuthManager { remberCookie = .. } will receive compilation warning only!
This includes, for example, a popular snaplet-postgresql-simple Auth
Backend.