Documentation discrepancy for cookie: secure option

[IcyFoxe]

I've noticed that in the readme it says, that cookie secure option defaults to true, however TypeScript says the opposite:

Edit:
Same for httpOnly option.

In both cases TypeScript tooltip is wrong.