Try 1s for cookie config because booleans don't work

We want to set the PLAY_SESSION cookie to be secure and http-only but the config doesn't work as described in the documentation.
This is a shot in the dark attempt to see if this will work.
Merge branch 'master' of github.com:alphagov/supplier-submission-portal