diff --git a/src/http/headers.zig b/src/http/headers.zig
index a0bebea..8b8100b 100644
--- a/src/http/headers.zig
+++ b/src/http/headers.zig
@@ -103,7 +103,8 @@ pub const Fields = struct {
         errdefer self.allocator.free(val_clone);
 
         if (try self.unmanaged.fetchPut(self.allocator, key_clone, val_clone)) |entry| {
-            self.allocator.free(entry.key);
+            self.allocator.free(key_clone);
+            //self.allocator.free(entry.key);
             self.allocator.free(entry.value);
         }
     }
@@ -123,8 +124,8 @@ pub const Fields = struct {
     }
 
     pub const CookieOptions = struct {
-        Secure: bool = false,
-        HttpOnly: bool = false,
+        Secure: bool = true,
+        HttpOnly: bool = true,
         SameSite: ?enum {
             Strict,
             Lax,