Revert "Allow cookies over HTTP."

Reverts SURFnet/Stepup-SelfService#21