diff of 6b76e182d5e2bb745b925a3b1e072f42f4c9d99f

6b76e182d5e2bb745b925a3b1e072f42f4c9d99f
diff --git a/src/routes/login-routes.lisp b/src/routes/login-routes.lisp
index 519ecdc..2865581 100644
--- a/src/routes/login-routes.lisp
+++ b/src/routes/login-routes.lisp
@@ -36,7 +36,8 @@
 
 (defun set-session-cookies (username session-key max-age settings)
   (hunchentoot:set-cookie "murja-username" :value username
-					   :secure t
+			  ;; :secure t breaks on localhost
+			  		   :secure (not lisp-fixup:*dev?*)
 					   :path "/"
 					   :max-age max-age 
 					   :http-only t
@@ -46,7 +47,7 @@
 					   :same-site "Strict")
   
   (hunchentoot:set-cookie "murja-session" :value session-key
-					  :secure t
+					  :secure (not lisp-fixup:*dev?*)
 					  :path "/"
 					  :max-age max-age 
 					  :http-only t
@@ -146,7 +147,7 @@
 	  :initial-value (hash)))
 
 ;; forms-based login 
-(defroute post-login ("/api/login"
+(defroute forms-post-login ("/api/login"
 		      :method :post
 		      :decorators (@test-now @transaction)) ()
   (let* ((form (formdata->hashmap (hunchentoot:raw-post-data :force-text t)))
diff --git a/src/view/components/tabs.lisp b/src/view/components/tabs.lisp
index c2e775b..4ceb123 100644
--- a/src/view/components/tabs.lisp
+++ b/src/view/components/tabs.lisp
@@ -42,7 +42,7 @@
   `(progn
      (setf (gethash (quote ,sym) *tabs*)
 	   (make-instance 'tab :url ,url
-			       :abilities ,needed-abilities
+			       :abilities (list ,@needed-abilities)
 			       :require-login ,require-login
 			       :subtab ,subtab
 			       :title ,title