Fix the name of configuration properties httpOnly and secure ( httpOnlyCookie and secureCookie respectively) as well as their default values that are false in both cases.