sessionCookieForceSecure property
read / write
Force the use of secure cookies for the session cookie.
If session cookies are used, they are created with their secure flag set if this is set to true. That indicated to the browser to only send the cookie over a secure connection (HTTPS).
The default value is false. This allows the cookies to be used over HTTPS and unsecured HTTP, which is necessary when testing over HTTP.
Note: if the server is run over HTTPS (i.e. the run method is invoked with credentials) secure cookies are automatically used. Therefore, setting this member to true is only important if running the Web server in unsecured mode, but with a HTTPS reverse proxy providing a secured connection to the Web server.
Implementation
bool sessionCookieForceSecure = false