More secure websocket com, sessionid Http-Only: True again

Signed-off-by: Andre (home) <andre.ok@online.no>