I have this written at the very first line on every page of my website.
include(\"restd.php\");
and restd.php contains the following lines
In my case I forgot that I had the PHP flag session.cookie_secure set to on, while the development environment was not TLS-secured.
session.cookie_secure
on
More information about Session/Cookie parameters.