working on the httponly tutorial
Resolves #133