powers

=> "/", "domain" => "$domain", "secure" => true, // Prevent client-side JavaScript access to the part which is the most