Merge pull request #138 from manics/disable-internal-secure-cookies

Disable omero.web.*_secure

Author: joshmoore

home/jobs/OMERO-web/config.xml

@@ -108,9 +108,9 @@ $OMERO_DIST/bin/omero config set omero.web.public.user public
 $OMERO_DIST/bin/omero config set omero.web.public.password public
 $OMERO_DIST/bin/omero config set omero.web.public.url_filter '^/'
 
-# Security
-$OMERO_DIST/bin/omero config set omero.web.session_cookie_secure true
-$OMERO_DIST/bin/omero config set omero.web.csrf_cookie_secure true
+# Security: Breaks internal connections to http://nginx/
+# $OMERO_DIST/bin/omero config set omero.web.session_cookie_secure true
+# $OMERO_DIST/bin/omero config set omero.web.csrf_cookie_secure true
 
 # QA feedback configuration
 $OMERO_DIST/bin/omero config set omero.web.feedback.comment.enabled false