Only set cookie to secure only when its set from https
uping version of cookie cutter