Make the MoMpath cookie secure

I created a merge request with the logic for this.
In my environment it still works but needs someone else testing it first before merging.

I tested this and it works fine for me, so I'm gonna merge this