Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=41217 Mark SSO cookies as secure. This is CVE-2008-0128.
Changed paths: