Try setting “secure” to “false”.
The “false” is confusing – it’s still secure. Have a look here, for example: