TODO was already done!
Update TODO comment
Make session cookie Secure via horrendous copy-pasta