fixed cookie secure issue

needed to set cookie secure to true