Use secure cookies only in prod

Author: alexcrichton

Cargo.lock

@@ -24,7 +24,7 @@ export default Ember.Route.extend({
             }
             var data = response.data;
             if (data.errors) {
-                var error = "Failed to log in: " + data.errors[0];
+                var error = "Failed to log in: " + data.errors[0].detail;
                 self.controllerFor('application').set('flashError', error);
                 return;
             }

app/routes/login.js

@@ -126,7 +126,8 @@ pub fn middleware(app: Arc<App>) -> MiddlewareBuilder {
     m.around(util::Head::new());
     m.add(conduit_conditional_get::ConditionalGet);
     m.add(conduit_cookie::Middleware::new(app.session_key.as_bytes()));
-    m.add(conduit_cookie::SessionMiddleware::new("cargo_session"));
+    m.add(conduit_cookie::SessionMiddleware::new("cargo_session",
+                                                 env == Env::Production));
     m.add(app::AppMiddleware::new(app));
     m.add(db::TransactionMiddleware);
     m.add(user::Middleware);