I've put the fix for the cookie, you'll maybe have to log in again if you were using https only, but after that it should work as before.
Now if you log in via http, that cookie can be used for both http and https. If you log in via https, a different cookie will be used only for https.

One advantage of the change I did (and with this fix added to it) is that if you are on a public network and using https for that reason, you will not accidentally log in just by following a http link.