Broken Authentication vulnerabilities on login cookies

• Set cookie on https connection only