Bug 25360: Use secure flag for CGISESSID cookie when using HTTPS