I added following line to my context.xml as discussed in This question and now all my cookies were set to secure and httponly.
but now when i logged in to the system it throw me out and said my session got expired.
system is running on 'Http' and is there anything i missed here?
Thank you in advance.
I fixed this issue by using
<SessionCookie httpOnly="true" />
instead of<SessionCookie secure="true" httpOnly="true"/>