Are all cookies now considered secure? or does this need exposing in SetCookieOptions?
If the site is running HTTPS then cookies are secured automatically.
To add for information purposes, this was the case in 13 as well.
