Current session/user info:

SID:   65ek3ou4dp1ntvs1p5ncs26cdv
User:  (guest)

Incoming cookies sent by your browser (note: flags like HttpOnly/SameSite aren't visible here, only on Set-Cookie):

Array
(
    [PHPSESSID] => 5p7sqcmd3vrc2jblcdimsbhghl
)

Compare this SID with the one from Begin. In the secure flow, it should differ; in the insecure flow, it will match.