prod tomcat on port 80 and 443, session fixation