fix siteid cookie to secure

classes/misc/csrf.php

@@ -33,7 +33,7 @@ class csrf {
 
                 setcookie ( self::makeCookieName($page), $token->cookietoken, [
                     'expires' => $token->expiry,
-                    'secure' => false,
+                    'secure' => true,
                     'httponly' => true,
                     'samesite' => 'Strict',
                 ]);