try using secure cookies