map $scheme $header_cookie_secure { default ""; "https" "secure"; }