Project refactoring, http-only and secure cookies are now set through web fragments instead of cookie injectors. Fixes for #1 and #2