title: Secure CookieSession when using iisnode
body: <p>I'm using node with IIS by using <a href="https://github.com/tjanczuk/iisnode" rel="nofollow">iisnode</a> and I'm having troubles setting the CookieSession option <code>secure:true</code>.</p>
  
  <p>I'm using HTTPS on IIS and I'm redirecting any HTTP to HTTPS.
  But evenw ith this, if I set the <a href="https://github.com/expressjs/cookie-session" rel="nofollow">CookieSession</a> option <code>secure:true</code>, the session won't have any content after login.</p>
  
  <blockquote>
    <p><strong>secure:</strong> a boolean indicating whether the cookie is only to be sent over HTTPS (false by default for HTTP, true by default for HTTPS).</p>
  </blockquote>
  
  <p>I'm forced to use <code>secure:false</code> to make it work. Why is it?</p>