diff --git a/pkg/webutil/session.go b/pkg/webutil/session.go
index b7208b0..dc24786 100644
--- a/pkg/webutil/session.go
+++ b/pkg/webutil/session.go
@@ -65,6 +65,12 @@ func SessionMiddlewareCookieDomain(domain string) SessionMiddlewareOption {
 	}
 }
 
+func SessionMiddlewareCookieUnsecure() SessionMiddlewareOption {
+	return func(c *sessionMiddlewareConfig) {
+		c.store.Options.Secure = false
+	}
+}
+
 func sessionMiddlewareFunc(next http.Handler, secret SessionSecret, opts ...SessionMiddlewareOption) http.Handler {
 	config := sessionMiddlewareConfig{
 		name:  fmt.Sprintf("%s-session", cmdutil.Name),