In my application, I added secure flags to the session header using this solution: https://stackoverflow.com/a/16616225
I experienced the following problem: