diff --git a/readme.md b/readme.md
index c01b7d6..3a504f5 100644
--- a/readme.md
+++ b/readme.md
@@ -157,7 +157,7 @@ server {
 
 (You will most likely encounter a issue where 2 packages namely: visitor and captcha require at least php 7.2, to get around this just change the value to 7.1 in the composer.lock file)
 
-For your local development instance make sure that you change 'secure' => true, to 'secure' => false, in `config/session.php` otherwise it will not let you log in!
+For your local development instance make sure that you add SECURE_COOKIE=false to your `.env` otherwise it will not let you log in!
 
 Create the .env file with the following content
 
@@ -180,6 +180,9 @@ RECAPTCHA_PRIVATE=
 
 MATRIX_MAUAUTH=
 MATRIX_MAUURL=
+
+# if you are developing
+SECURE_COOKIE=false
 </pre>
 
 `php71 artisan key:generate`