chore: make cookie secure flag conditional for development and add pnpm store to gitignore

packages/eslint-config/package.json

@@ -20,6 +20,7 @@
   "dependencies": {
     "@eslint/eslintrc": "^3.0.0",
     "@eslint/js": "^9.39.2",
+    "@next/eslint-plugin-next": "15.1.6",
     "eslint-config-next": "15.1.6",
     "typescript-eslint": "^8.54.0"
   }

packages/gatekeeper/src/app/login/page.tsx

@@ -79,9 +79,11 @@ export default async function LoginPage({ searchParams }: LoginPageProps) {
         timestamp: Date.now(),
       });
 
+      const isDev = process.env.NODE_ENV === "development";
+
       cookieStore.set(authCookieName, sessionValue, {
         httpOnly: true,
-        secure: true,
+        secure: !isDev,
         path: "/",
         maxAge: 30 * 24 * 60 * 60, // 30 days
         sameSite: "lax",