Optionally set 'secure' flag on session cookies automatically, closes #898
merge [3562/branches/0.11], refs #898