It's not secure. I can bypass login page, try access http:// ... /admin/pages/index The Login Session is not working.