New patch for Dual http/https session cookies interfere with drupal_valid_token()