secure cookies

src/main/resources/application.properties

@@ -2,6 +2,10 @@
 spring.mvc.view.prefix: /WEB-INF/jsp/
 spring.mvc.view.suffix: .jsp
 
+# secure cookies require https => set TGREP_SSL=TRUE env var in docker
+tgrep.ssl = false
+server.servlet.session.cookie.secure: ${tgrep.ssl}
+
 # textgrid defaults
 textgrid.host: https://textgridlab.org
 handle.host: https://hdl.handle.net