cookie to expire in 90 days "path" => "/", "domain" => "$domain", "secure" => true, // Ensure cookies are only sent over HTTPS "httponly" => true, /* Preset privacy friendly frontends for users, these can be overwritten by users in the Appropriate Legal Notices, your work need not include