@vojko I was able to reproduce this. Set :sha "cdc11a311838a601ce250d9bada2785e8b9daf9b"
in example/deps.edn
to update to the fixed version.
This was the culprit: https://github.com/jacobobryant/biff/commit/80526c0f3b8b9ae9fb4089055f703eae36e0090f (:man-facepalming::skin-tone-2:)
The session cookie in development was supposed to not be set with secure
(since it's served over http://)
Yes, everything works perfectly. Thx!