stack-monitor: protection HttpOnly added for cookie