Added custom error page and httponly attribute