bug 1049654 - Set SESSION_COOKIE_SECURE to true by default

@lonnen r?