fix: resolve login redirect failures by removing cookie domain and implementing session data encryption

server/api/auth/direct-login.post.ts

@@ -236,17 +236,14 @@ export default defineEventHandler(async (event) => {
     const sessionManager = createSessionManager();
     const maxAge = !!rememberMe ? 60 * 60 * 24 * 30 : 60 * 60 * 24 * 7; // 30 days vs 7 days
     
-    // Don't set a domain for the cookie - let it default to the current domain
+    // Create the encrypted session data
+    const sessionData_json = JSON.stringify(sessionData);
+    const encrypted = sessionManager.encrypt(sessionData_json);
+    
     console.log(`🍪 Setting session cookie (Remember Me: ${!!rememberMe}) without explicit domain`);
     
-    // Create the session cookie string using the session manager
-    const sessionCookieString = sessionManager.createSession(sessionData, !!rememberMe);
-    
-    // Parse the cookie string to get just the value
-    const cookieValue = sessionCookieString.split('=')[1].split(';')[0];
-    
-    // Use Nuxt's setCookie helper with the encrypted value
-    setCookie(event, 'monacousa-session', cookieValue, {
+    // Use Nuxt's setCookie helper directly with the encrypted value
+    setCookie(event, 'monacousa-session', encrypted, {
       httpOnly: true,
       secure: process.env.NODE_ENV === 'production',
       sameSite: 'lax',