Cookies are now set as httponly and can not be read by javascript

please review
It's strange because i didn't remove it