need help adding 2 iRules please - I am a NOOB so let's get that out there up front

I think more clarification would be needed to answer the first question... like what do they mean by secure cookies. There's the secure flag on a cookie. When it says to only send the cookie over HTTPS. You can take a look at the HTTP::cookie command to get an idea as to what you can do within an iRule with cookies.

For the second request, I think that iRule would work fine. The syntax looks good, and it'll send that Header on every response. Only thing I'd change is from insert to replace so that if the header already exists, then it'll just replace it instead of adding another one.

when HTTP_RESPONSE { 
    HTTP::header replace Strict-Transport-Security "max-age=31536000; includeSubDomains;" 
}