Don't set cookie in HTTP only mode, our javascript will not be able to see the customer id