Add secure cookie flag to readme

I wanted to utilize Koa's [`secure`](https://koajs.com/#ctx-cookies-set-name-value-options-) so that generated cookies were only sent over HTTPS, but the readme was somewhat unclear whether this was supported.

It looks like all options given in the module's configuration are passed to Koa's `ctx.cookies.set` method, so setting this flag is already possible, but it would be helpful to add `secure` to the `CONFIG` example given in the readme.

Thanks!

Update the README's CONFIG example to include Koa's secure cookie option. Start with the existing CONFIG example and confirm the documentation makes clear that this option is passed through to ctx.cookies.set and restricts cookies to HTTPS.

Written by the indexing model from the issue text.