Always set secure cookies if logging in via HTTPS