[completes #57594568] HTTPOnly flag is not set on cookies