Trusting the proxy

[sfrunza13]

What would you like to be added:

We could try to add trust for proxy in case this makes a difference with the session cookie.secure set to true since we are using nginx.

var app = express()
app.set('trust proxy', 1) // trust first proxy
app.use(session({
...

Why would you like this to be added:

In the express-session docs they claim this trust should be set if cookie.secure is set to true. This is a part of an ongoing effort to get cookies to send within the post binding part of the Azure AD authentication which I broke with #3789. Could be contributing/considered along with the latest issue #3791.