Enabled session.cookie_httponly/session.cookie_secure settings at php.ini.