Set the cookie secure flag by default

[ejaronne]

using the Ruby on Rails Framework options

[vanessuniq]

Just checked, Vulcan uses the Devise’s rememberable module. Setting the secure flag and http only can be done by updating the devise config config/initializers/devise.rb, setting the the secure attribute for the cookie as follow:

config.rememberable_options = { secure: true, httponly: true }