docs: @Override
      public boolean allowToAddCookieToResponse(HttpServletRequest req) {
          if (!config.isSingleSignonEnabled()) {
              if (TraceComponent.isAnyTracingEnabled() && tc.isDebugEnabled()) {
                  Tr.debug(tc, "SSO is not enabled. Not setting the SSO Cookie");
              }
              return false;
          }
          boolean secureRequest = req.isSecure();
          if (config.getSSORequiresSSL() && !secureRequest) {
              if (TraceComponent.isAnyTracingEnabled() && tc.isDebugEnabled()) {
                  Tr.debug(tc, "SSO requires SSL. The cookie will not be sent back because the request is not over https.");
              }
              return false;
          }
          return true;
      }