Mark the session cookie as secure if created over a secure connection