add composer support and dont use httpOnly