HttpOnly tests added
bugfix