- just set secure flag for secure connections
- setting login-cookie to "secure" when set over secure connection
- move deprecated procs to file with deprecated functions
- replace "global" statement by variables with namespace paths
- white space changes: replace tabs by spaces
- undo previous secure-cookie change since it interacts badly in situations where "RestrictLoginToSSLP" is "1" and https is available: In such cases, e.g. the login page is redirected from a http (insecure) url to an https (secure) page. But when later continuing on the http connection, the user appears to be not logged in, since a well-behaved browser does not send the "secure" login coockie over the insecure connection.
- patch for a subtle difference between aolserver and Naviserver in the handling of "--" (nonpos parameter terminator)