import config from 'config';
import hapiAuthCookie from 'hapi-auth-cookie';

export default (server, projectConfig) => {
  server.register(hapiAuthCookie, (err) => {
    if (err) {
      throw err;
    }

    server.auth.strategy('session', 'cookie', 'optional', {
      password: config.get('hapi.authCookie.password'),
      cookie: 'sid',
      isSecure: false
    });
  });
};

@@ -355,13 +355,34 @@
 re: 
-false
+projectConfig.isProduction
 %0A   

Make sid cookie secure in production