GO-2022-1213 Insecure generation of cookies in github.com/go-macaron/csrf

The Options.Secure value is ignored, and cookies created by Generate never have the secure attribute...