code: public Cookie createCookie(HttpServletRequest req, String cookieValue) {
          return createCookie(req, getSSOCookiename(), cookieValue, config.getSSORequiresSSL());
      }
docs: Creates the SSO cookie with max age of <code>-1</code>, path set to <code>/</code>,
  and an optional domain name. The cookie's <code>secure</code> flag depends on the
  <code>ssoRequiresSSL</code> configuration.
  
  @param req the HTTP servlet request.
  @param cookieValue the value used to create the cookie from.
  @return ssoCookie the SSO cookie.