Slight lexicon change to warn against using session_cookie_secure (re #2768)