Supports HTTP only cookies