Apparently your code is correct on the server. Therefore, the cookie should not be set correctly on the client.
/ cookie, SSL:
const setAppCookie = () => firebase.auth().currentUser &&
firebase.auth().currentUser.getToken().then(token => {
Cookies.set('token', token, {
domain: window.location.hostname,
expire: 1 / 24,
path: '/',
secure: false
});
});