final String secure = fessConfig.getCookieSearchParameterSecure();
        if (StringUtil.isBlank(secure)) {
            final String forwardedProto = request.getHeader("X-Forwarded-Proto");
            if ("https".equalsIgnoreCase(forwardedProto)) {
                return true;
            }
            return request.isSecure();
        }