ensure SESSION_COOKIE_SECURE is not False