Fix @ssl_required to look at SESSION_COOKIE_SECURE

Instead of triggering on DEBUG=False, it now triggers on
SESSION_COOKIE_SECURE=True.