revert 2 yr broken "feature" - we do not want to set the secure flag in tracker cookies for http/https compatibility