add config for secure cookies
add SSL Only filter and lock-down session cookie to http only and ssl only
add SSLOnly filter to all urls
add config to setup tomcat for storing sessions in memcache, this corresponds to storing 3 jars and a new context.xml in S3 to be copied onto the target machine at deply