check that the `secure-cookie` in this section is correct