From 95de92cd8df0059b386f50e7ee5f2232ef241b82 Mon Sep 17 00:00:00 2001
From: Daniel Jee <danieljee123@gmail.com>
Date: Mon, 1 Jul 2019 11:58:03 +1000
Subject: [PATCH] allow cookie to be set in an insecure channel

---
 index.js | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/index.js b/index.js
index 24221b48..dbae9c9e 100644
--- a/index.js
+++ b/index.js
@@ -227,11 +227,11 @@ function session(options) {
         return;
       }
 
-      // only send secure cookies via https
-      if (req.session.cookie.secure && !issecure(req, trustProxy)) {
-        debug('not secured');
-        return;
-      }
+      // // only send secure cookies via https
+      // if (req.session.cookie.secure && !issecure(req, trustProxy)) {
+      //   debug('not secured');
+      //   return;
+      // }
 
       if (!touched) {
         // touch session