User session and https
Add $conf['https'] = TRUE; to settings.php.

from here:
http://drupal.org/node/1037542
and 
http://drupal.org/https-information

however, why not just run the whole site securely?