comment http_sessions mixed http/https patch