Remove :secure cookie from Set-Cookie resp header