Don't use secure sessions if we're in non-SSL dev-style mode