ZEN-13755: ZAthToken is not secure or HttpOnly