*
     * @param cookieSecure true if the cookie should be secure (HTTPS only), false otherwise, or null for auto-detection
     */
    public void setCookieSecure(final Boolean cookieSecure) {
        this.cookieSecure = cookieSecure;
    }

    /**
     * Sets whether the user identification cookie should be HTTP-only.
     *