Index: lams_build/conf/unix/jboss/jbossweb/context.xml
===================================================================
RCS file: /usr/local/cvsroot/lams_build/conf/unix/jboss/jbossweb/context.xml,v
diff -u -r1.3 -r1.4
--- lams_build/conf/unix/jboss/jbossweb/context.xml	6 Jul 2009 07:25:49 -0000	1.3
+++ lams_build/conf/unix/jboss/jbossweb/context.xml	6 Aug 2013 20:41:25 -0000	1.4
@@ -13,6 +13,11 @@
    role for servlet init/destroy events.
    -->
    <InstanceListener>org.jboss.web.tomcat.security.RunAsListener</InstanceListener>
+
+   <!-- LDEV-3088 Option to set session cookie as secure and httpOnly
+        Set secure="true" only if you are using https
+    -->
+   <SessionCookie secure="false" httpOnly="true" />
    
    <!-- 
    		LAMS Valve