Add new config variables (defaults are what you want if you don't have http to https redirect enabled)

Add security enhancements. See: https://blog.miguelgrinberg.com/post/cookie-security-for-flask-applications