Add secure attribute to cookies if wsgi.url_scheme == 'https'

This patch adds secure attribute to cookies if wsgi.url_scheme == 'https'.