Make sessions more secure in mixed HTTP & HTTPS environments