change route.ts

app/api/auth/login/route.ts

@@ -88,7 +88,7 @@ export async function POST(request: NextRequest) {
     // Set secure session cookie
     response.cookies.set('user_session', JSON.stringify(userWithoutPassword), {
       httpOnly: true,
-      secure: process.env.NODE_ENV === 'production',
+      secure: false, // Set to false to allow HTTP (for Coolify deployment)
       sameSite: 'lax',
       maxAge: 24 * 60 * 60, // 24 hours
       path: '/',