Fixed: secure-cookie option is no longer set if $_SERVER['HTTPS'] is set but == "off"
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<title>blank_page</title>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
</head>
<body onload="parent.setupIframe(document);">
</body>
</html>