diff --git a/src/lib/auth.ts b/src/lib/auth.ts
index c22eaaf..2a3182d 100644
--- a/src/lib/auth.ts
+++ b/src/lib/auth.ts
@@ -9,7 +9,7 @@ const sessionOptions: SessionOptions = {
   password: process.env.SESSION_SECRET || "dev-session-secret-change-in-production-must-be-32-chars",
   cookieName: "study-app-session",
   cookieOptions: {
-    secure: process.env.NODE_ENV === "production",
+    secure: process.env.NODE_ENV === "production" && process.env.SECURE_COOKIES === "true",
     httpOnly: true,
     sameSite: "lax" as const,
   },