set httonly to false
disable shared ssl
disable https redirection