Changed authentication cookies to HttpOnly