Fix some issues with secure cookies being overwritten by insecure site.

Now, /publish/{edit,addeditor,login,logout} must be accessed via
https://; other pages should not be (but can be).

publish/addeditor.php

@@ -1,4 +1,7 @@
 <? 
+if ( ! isset($_SERVER['HTTPS'])) {
+   header('Location: https://' . $_SERVER["SERVER_NAME"] . $_SERVER['REQUEST_URI']);
+}
 require_once("../session.lib.php"); 
 $added = FALSE;
 if (!isset($_SESSION['editor'])) {