Hello Paul :)

auth will happen here, and if passed, we will load in the sdk around here... (but if you are not authenticated, we will kick you out to login properly)

Also, here are your cookies to check against for secure headers:
Array
(
    [PHPSESSID] => hp6ngt7e28cbuiaopapqm3mqu1
)
Array
(
)
Session cookie name: PHPSESSID
Session ID: hp6ngt7e28cbuiaopapqm3mqu1
Cookie value sent by browser: hp6ngt7e28cbuiaopapqm3mqu1
Array
(
    [lifetime] => 0
    [path] => /
    [domain] => 
    [secure] => 
    [httponly] => 
)