added setting for the 'secure' flag on the session cookie when ussing https
Merge pull request #853 from ThePeePs/dev

set 'secure' flag on session cookie when using https