I am using Tomcat in my production environment and jetty in my testing environment (via jetty-maven-plugin).
Tomcat sets the secure-flag on a jsessionid-cookie, when it
The configuration changes needed to set the secureCookies property can be added to the jetty-web.xml file:
true