Changed cookie policy "httpOnly = false"