fixed a typo
removed secure cookies, as I'm going to validate cookies separate from the Express middleware.
took away an unnecessary function and fixed some typos
cookies aren't being signed by Express anymore