`.secure()` accept a boolean

[sachaw]

when used in development, it is normal to server cookies over http.

Allowing the secure behaviour to be overwritten by providing a boolean to .secure() default true would allow a scenario like the following:

const cookie = new CookieBuilder()
      .name("Token")
      .value(token)
      .sameSite(SameSite.Strict)
      .maxAge(this.tokenExpiration)
      .path("/")
      .httpOnly().
      .secure(process.env.NODE_ENV === "production")
      .build()