Add change note

Author: smowton

java/ql/src/change-notes/2022-04-26-insecure-cookie-named-constants.md

@@ -0,0 +1,6 @@
+---
+category: minorAnalysis
+---
+* Query `java/insecure-cookie` no longer produces a false positive if 
+`cookie.setSecure(...)` is called passing a constant that always equals 
+`true`.