[galaxy-dev] galaxysession cookie secure flag