Cannot set cookie with secure attribute ...