Add secure cookie header to protect login state data (#279)

src/main/resources/application.properties

@@ -45,6 +45,7 @@ quarkus.oidc.logout.post-logout-path=/
 quarkus.oidc.logout.path=/api/logout
 security.csrf.enabled=true
 quarkus.oidc.authentication.java-script-auto-redirect=false
+quarkus.oidc.authentication.cookie-force-secure=true
 
 ## Recreate DB profile (easy to trigger in remote envs)
 %dbfresh.quarkus.hibernate-orm.database.generation=drop-and-create