"is_moodle_cookie_secure()" is buggy

"is_moodle_cookie_secure()" function returns wrong result. It cause wrong report at moodle security review page.

https://github.com/moodle/moodle/blob/master/lib/sessionlib.php#L99

orisinal

if (!empty($CFG->loginhttps)) {

    return false;

}

correct

if (empty($CFG->loginhttps)) {

    return false;

}