Evaluation of getToken secureCookies parameter does not work as intended

[kwesterfeld2]

Fix case where secureCookie is passed as false, and we need it to stay false
in evaluation. Use the nullish coalescing operator here to avoid calling into
getServerOrigin(), which does not apply to our use case.

🔗 Linked issue

❓ Type of change

• 📖 Documentation (updates to the documentation, readme or JSdoc annotations)
• 🐞 Bug fix (a non-breaking change that fixes an issue)
• 👌 Enhancement (improving an existing functionality like performance)
• ✨ New feature (a non-breaking change that adds functionality)
• 🧹 Chore (updates to the build process or auxiliary tools and libraries)
• ⚠️ Breaking change (fix or feature that would cause existing functionality to change)

📚 Description

📝 Checklist

• I have linked an issue or discussion.
• I have added tests (if possible).
• I have updated the documentation accordingly.