[otrs] reg: session cookie to set as secure