Add secure and httponly options for cookies

[cpadlab]

I have added the option to configure Secure and HttpOnly flags for cookies, as this prevents potential cookie theft or unauthorized access via scripts.

I have been testing this implementation locally on a server, and it works perfectly. To use it, the user only has to update the security section in the configuration file.

---

Example change in conf/conf.json:

From this:

"security": {
    "xsrf_protection": "token"
}

To this:

"security": {
    "xsrf_protection": "header",
    "cookie_secure": true,
    "cookie_httponly": true
}