cookies: fix secure condition