Add option for HttpOnly cookies.