Set global sign out cookie security using federation cookiehandler configuration

I believe that the idsrvauth cookie and the wsfedsignout cookie should follow the same security setting. This will default to RequireSsl = true, but make it possible to disable this for development and test purposes.