fixed secure cookies