Http only = false, added ratedlist