Investigate HTTP/HTTPS solutions

[astorm]

A cookie set during a secure request won't be sent to the server during a non-secure request.

Investigate ways to ensure Cross Area Session always works (stash session IDs somewhere, "super session" id, etc.)

[infabo]

I experienced a problem with HTTPS admin-panel and HTTP-only frontend, where there adminhtml-sessiondata cannot be read. Is this what is meant?

[astorm]

@infabo Yup, that's the sort of thing this issue is referring to.