write_cookie?

# File actionpack/lib/action_dispatch/middleware/cookies.rb, line 431
        def write_cookie?(cookie)
          request.ssl? || !cookie[:secure] || always_write_cookie || request.host.end_with?(".onion")
        end