[NewsBlur] Secure the domain cookie

Missed this one: there's a session cookie for host=.newsblur.com that's not secured by default.