Fix @ssl_required to look at SESSION_COOKIE_REQUIRED

Instead of triggering on DEBUG=False, it now triggers on
SESSION_COOKIE_REQUIRED=True.


r?