diff --git a/app/controllers/auth.controller.js b/app/controllers/auth.controller.js
index 50fdc24..cf29333 100644
--- a/app/controllers/auth.controller.js
+++ b/app/controllers/auth.controller.js
@@ -75,9 +75,13 @@ exports.login = async (req, res) => {
 
     // Set token in HTTP-only cookie (IMPORTANT PART)
     res.cookie("auth_token", token, {
+      // httpOnly: true,
+      // secure: process.env.NODE_ENV === "production", // true in prod (HTTPS)
+      // sameSite: "lax", // or "strict" if suitable
+      // maxAge: 6 * 60 * 60 * 1000, // 6 hours in ms
       httpOnly: true,
-      secure: process.env.NODE_ENV === "production", // true in prod (HTTPS)
-      sameSite: "lax", // or "strict" if suitable
+      secure: true, 
+      sameSite: "none", 
       maxAge: 6 * 60 * 60 * 1000, // 6 hours in ms
     });
 
diff --git a/app/routes/routes.js b/app/routes/routes.js
index 8d11b88..16c37f4 100644
--- a/app/routes/routes.js
+++ b/app/routes/routes.js
@@ -167,6 +167,17 @@ router.post("/auth/admin_register",[verifySignature], authController.register);
  */
 router.post("/auth/login",[verifySignature], authController.login);
 
+/**
+ * @swagger
+ * /api/auth/logout:
+ *   get:
+ *     summary: Logout Admin-user / Establishments-user 
+ *     tags: [Admin And Establishments User Auth]
+ *     security:
+ *       - appSignature: []
+ */
+router.get("/auth/logout",[verifySignature], authController.logout);
+