[bug 916079] Always POST browserid_verify to https if SESSION_COOKIE_SECURE is set.