Robert Damrau
The 'jwt' cookie should have 'Secure' set to 'true'.
June 5, 2020