Separating HTTP and HTTPS cookies