Fix/secure cookie

[jenbutongit]

Description

Please include a summary of the change and which issue is fixed. Please also include relevant motivation and context. List any dependencies that are required for this change.
Please also include any acceptance criteria if you have any.

• Correctly set isSecure on the session cookie
• Fix auth test which relied on removing secure; HttpOnly (since the cookie now correctly does not have the secure; flag)

Type of change

Please delete options that are not relevant.

• Bug fix (non-breaking change which fixes an issue)

How Has This Been Tested?

Please describe the tests that you ran to verify your changes. Provide instructions so we can reproduce
the testing if necessary.

• Fix unit tests
• Local check on cookies

Checklist:

• I have performed a self-review of my own code
• I have commented my code, particularly in hard-to-understand areas
• I have made corresponding changes to the documentation and versioning
• I have updated the architecture diagrams as per Contribute.md OR added an architectural decision record entry