Added indieauth.securecookies config parameter, allowing people to selectively turn off secure cookies