Current session/user info:
SID:   4n6ittaklfceorfpm6sll1v1ug
User:  (guest)
Incoming cookies sent by your browser (note: flags like HttpOnly/SameSite aren't visible here, only on Set-Cookie):
Array
(
)
Compare this SID with the one from Begin. In the secure flow, it should differ; in the insecure flow, it will match.