diff --git a/internal/cognitoauth/auth.go b/internal/cognitoauth/auth.go
index 84e540a1..92d52cc5 100644
--- a/internal/cognitoauth/auth.go
+++ b/internal/cognitoauth/auth.go
@@ -285,7 +285,7 @@ func getRefreshTokenFromCookie(c echo.Context, config auth.ConfigProvider) strin
 // Returns:
 //   - bool: True if cookies should be marked as Secure
 func isSecureContext(config auth.ConfigProvider) bool {
-	// For now, return false to match existing comment in original code
-	// In production, this should return true based on environment detection
-	return false
+	// This is a shim left here in case we need to add some computation
+	// before returning a result (for testing mostly)
+	return true
 }