Session cookies have the parameter "secure" when the connection is HTTPS