Is there any support to save JWT token in Cookies with httpOnly and Secure flags? Right now it is saving into localstorage. It has less secure.