Revert "force secure cookies in production"

This reverts commit ecf319619127ddb18f69e6cf22f9044678f7f6b6.