The secure tag is missing on the session and xsrf token on laraship. simple scan through https://pentest-tools.com/