code: public Cookie getSessionCookie(HttpSession session,boolean requestIsSecure)
      {
          if (_handler.isUsingCookies())
          {
              Cookie cookie = _handler.getSessionManager().getHttpOnly()
                  ?new HttpOnlyCookie(SessionManager.__SessionCookie,session.getId())
                  :new Cookie(SessionManager.__SessionCookie,session.getId());    
              String domain=_handler.getServletContext().getInitParameter(SessionManager.__SessionDomain);
              String maxAge=_handler.getServletContext().getInitParameter(SessionManager.__MaxAge);
              String path=_handler.getServletContext().getInitParameter(SessionManager.__SessionPath);
              if (path==null)
                  path=getCrossContextSessionIDs()?"/":_handler.getHttpContext().getContextPath();
              if (path==null || path.length()==0)
                  path="/";
              
              if (domain!=null)
                  cookie.setDomain(domain);       
              if (maxAge!=null)
                  cookie.setMaxAge(Integer.parseInt(maxAge));
              else
                  cookie.setMaxAge(-1);
              
              cookie.setSecure(requestIsSecure && getSecureCookies());
              cookie.setPath(path);
              
              return cookie;    
          }
          return null;
      }
docs: /* ------------------------------------------------------------