Adding httponly option for setting cookies