FIX flushing on non-dev when Session::cookie_secure is true
Merge pull request #2346 from hafriedlander/fix/flush_when_secure

FIX flush when secure