diff --git a/mangooio-core/src/main/java/io/mangoo/routing/handlers/RequestHandler.java b/mangooio-core/src/main/java/io/mangoo/routing/handlers/RequestHandler.java
index <HASH>..<HASH> 100644
--- a/mangooio-core/src/main/java/io/mangoo/routing/handlers/RequestHandler.java
+++ b/mangooio-core/src/main/java/io/mangoo/routing/handlers/RequestHandler.java
@@ -364,6 +364,9 @@ public class RequestHandler implements HttpHandler {
             String cookieName = this.config.getAuthenticationCookieName();
             if (this.authentication.isLogout()) {
                 cookie = exchange.getRequestCookies().get(cookieName);
+                cookie.setSecure(this.config.getAuthenticationCookieSecure());
+                cookie.setHttpOnly(true);
+                cookie.setPath("/");
                 cookie.setMaxAge(0);
                 cookie.setDiscard(true);
             } else {
logout cookie is now http only and optional secure