Chrome does not set httponly cookies for localhost.

Going to merge this in because fixing...