fix cookie test to handle secure cookie scenario, now back to 100% test coverage