Enable secure cookies over localhost

[thegoldgoat]

I think it is reasonable to enable secure cookies on localhost, since browsers accepts them.

This simplifies development and avoid developers confusion, since now cookies are suppressed silently.

What I propose is updating isSecure:

session/index.js

Line 623 in 0048bca

function issecure(req, trustProxy) {

And add something like this:

if (req.connection.remoteAddress === '127.0.0.1' ||
    req.connection.remoteAddress === '::ffff:127.0.0.1'
) {
    return true;
}

I am opening a PR in a moment

Also see #837

[dougwilson]

Hello, and thanks for opening this issue. It seems to be a duplicate of #837 though. I can re-open if there is elaboration on how it is not a duplicate, though.