Ensure cookies are only sent over HTTPS "httponly" => true, /* Preset privacy friendly frontends for users, these can be