removed secure cookies for now (probably need to place that in production settings file)