fix: set cookie secure to false to fit self deployment

fix: set cookie secure to false to fit self deployment #2