+ secure flag for cookies in web.xml, * maven-tomcat7-plugin 2.2 (7.0.47)