Allow setting of secure session cookies from the session config

This will allow users to set an optional 'secure' flag in the session config to ensure a secure session cookie is set.