Added a non-essential flag to allow setting of secure session cookies from the session config