issecure function is not checking for x-arr-ssl

In Windows Azure there is header x-arr-ssl for check whether it is https or not. https://github.com/expressjs/session/blob/master/index.js#L599-L626 In issecure function we need to check for that header too.

Reference: https://tomasz.janczuk.org/2013/12/secure-by-default-with-ssl-in-windows.html

[dougwilson]

This module only looks at the header for backwards compatibility. The ideal method is to key off the req.secure boolean instead, so people can use whatever logic they desire. Adding that header in this module will cause issues, namely that almost no one will be blocking that header so users can forge the value.

[munir131]

@dougwilson Sorry for late reply. I made changes somewhat like you suggested. Thanks for detailed reply. I think we can close this issue. Thanks again.