Fix for cookie parser middleware

Was not properly setting httpOnly cookies