Explicitly mark session cookies as "Secure"
Explicitly mark session cookies as "Secure"

This means that cookies will only be sent over encrypted connections, thus
making it harder for an attacker to read/replay someone else's session.

The secure option was accidentally removed in 0ad105f7d7e7e692899e1f7d07cc197c903c9bbe.

alphagov/signonotron2,alphagov/signonotron2,alphagov/signonotron2,alphagov/signonotron2