Secure cookie

Flips the secure flag on for session cookies. Can one you's guys (@novotnyjakub or @threedaymonk) eyeball quickly and merge please?
Yeah, I didn't realise we want this to be `true` by default..

On 19 November 2014 14:59, Paul Battley <notifications@github.com> wrote:

> In config/initializers/session_store.rb:
>
> > @@ -1,4 +1,8 @@
> >  # Be sure to restart your server when you modify this file.
> >
> > +secure_cookie = ENV.fetch('SECURE_COOKIES', 'true')
> > +secure_cookie = %w[1 true].include?(secure_cookie)
>
> @Najaf <https://github.com/Najaf> That's exactly what I mean:
> accidentally setting SECURE_COOKIES=yes will give you secure cookies. The
> only way you get insecure cookies is to set SECURE_COOKIES=false
> precisely.
>
> —
> Reply to this email directly or view it on GitHub
> <https://github.com/ministryofjustice/scs_appraisals/pull/2/files#r20579249>
> .
>