set Secure flag on cookies if running with HTTPS
add cookie.httponly bool option.
New bool option "cookie.secure" to set whether cookies should set the secure flag.
make cookie.httponly and cookie.secure options apply to the flash
cookie as well.