sessions: cookie setting: secure to secureProxy