Added useHttpOnly in bonita.xml