diff --git a/server/routes/login.post.ts b/server/routes/login.post.ts
index 6b9ee83..43baa25 100644
--- a/server/routes/login.post.ts
+++ b/server/routes/login.post.ts
@@ -3,6 +3,9 @@ export default defineEventHandler(async (event) => {
     
     const body = await readBody(event)
 
+    const is_https = await getRequestProtocol(event) == "https"
+    //console.log(is_https)
+
     if ( !body.email || !body.password )
         throw createError({ statusCode: 400, message: "Bad form. Use e-mail and password" })
     //console.log(body)
@@ -32,6 +35,11 @@ export default defineEventHandler(async (event) => {
             secure: {
                 user_id: body.id
             }
+        }, {
+            cookie: {
+                secure: is_https,
+                sameSite: is_https ? 'none' : 'lax'
+            }
         })
         console.log(await getUserSession(event))