session.use_trans_sid = 0
session.cookie_secure = 1
session.cookie_httponly = 1