Cookies are now set as httponly and can not be read by javascript

please review
Check the content of your pull request with the Web UI (just before creating the pull request).