I would prefer it if we could set the cookie in the same way as the session cookie here (path, secure and httponly attributes).