enable cookies over HTTP on development