I'd nix the "on a local instance of a site" and reword this as "If set to True for a site running on a server that does not use HTTPS, the session cookie ..."