title: Oracle ApEx 4.1.1 secure cookies
body: <p>I have been asked to look into ensuring that the cookie's that Oracle ApEx 4.1.1 is using/setting are secure.</p>
  
  <p>I believe an example of this would be:</p>
  
  <pre><code>Set-Cookie: expires=Thu......; path=/;
  </code></pre>
  
  <p>Apparrently it should read as:</p>
  
  <pre><code>Set-Cookie: expires=Thu......; path=/;secure
  </code></pre>
  
  <p>Where do I need to set this in my SSO (Sentry) or is this performed on the App Server?</p>