The 'jwt' cookie should have 'Secure' set to 'true'.

Photo Viewer

View photos in a modal