Currently, the "secure" tag for the ASP.NET_SessionId is missing. 