removed requirement for security from session cookie
Merge pull request #37 from Lyla-Fischer/session_cookie

removed requirement for security from session cookie