I may just be getting tired, but below it looks like you are actually using both the path and the `secure` attribute.