title: Setting jsessionid cookie secure in tomcat
body: <p>Even after adding below xml tag in tomcat, I still see the jsessionid cookie showing up as not secure in view cookie plugin in firefox, any suggestions on making it secure</p>
  
  <pre><code>&lt;session-config&gt;
      &lt;cookie-config&gt;
          &lt;http-only&gt;true&lt;/http-only&gt;
          &lt;secure&gt;true&lt;/secure&gt;
      &lt;/cookie-config&gt;
  &lt;/session-config&gt;
  </code></pre>