title: How can I make cookies secure (https-only) by default in rails?
body: <p>In a Rails controller, I can set a cookie like this:</p>
  
  <pre><code>cookies[:foo] = "bar"
  </code></pre>
  
  <p>And specify that the "secure" (https-only) flag be on like this:</p>
  
  <pre><code>cookies[:foo, :secure =&gt; true] = "bar"
  </code></pre>
  
  <p><code>:secure</code> is false by default. How can I have cookies be secure by default, application-wide?</p>
  
  <p>This is on Rails 2.3.8</p>