Hello Paul :)

auth will happen here, and if passed, we will load in the sdk around here... (but if you are not authenticated, we will kick you out to login properly)

Also, here are your cookies to check against for secure headers:
Array
(
    [PHPSESSID] => o8c82o1idg8ed884h74oa5q262
)
Array
(
)
Session cookie name: PHPSESSID
Session ID: o8c82o1idg8ed884h74oa5q262
Cookie value sent by browser: o8c82o1idg8ed884h74oa5q262
Array
(
    [lifetime] => 0
    [path] => /
    [domain] => 
    [secure] => 
    [httponly] => 
)