SONAR-4487 the "remember me" cookie must also be flagged HttpOnly