merge cookie secure detection