josh/rack-ssl — pull request #18 by cashman (2012-10-15 14:24:43+00:00)
Title: Allow insecure domain cookies

This allows cookies with an explicit domain set (e.g. a topmost domain like ".example.com") to pass through without having the "secure" flag forced on them. Cookies with no domain set (the default) will still be automatically flagged as secure.