diff --git a/backend/scripts/_env b/backend/scripts/_env
index 6e40619ae6..0026d9f901 100644
--- a/backend/scripts/_env
+++ b/backend/scripts/_env
@@ -29,8 +29,6 @@ export PENPOT_FLAGS="\
        enable-user-feedback \
        disable-secure-session-cookies \
        enable-smtp \
-       enable-cors \
-       disable-secure-session-cookies \
        enable-prepl-server \
        enable-urepl-server \
        enable-rpc-climit \
diff --git a/backend/src/app/http/session.clj b/backend/src/app/http/session.clj
index 82ee73442e..f9154ab135 100644
--- a/backend/src/app/http/session.clj
+++ b/backend/src/app/http/session.clj
@@ -291,7 +291,7 @@
                     :expires expires
                     :value token
                     :comment comment
-                    :same-site :lax #_(if cors? :none (if strict? :strict :lax))
+                    :same-site (if cors? :none (if strict? :strict :lax))
                     :secure secure?}]
     (update response ::yres/cookies assoc name cookie)))