test for secure cookie