Minor Fix: miss spelled keyname

expecting "$_COOKIE['bypass']" not "$_COOKIE['byass']"