ZEN-10145 insecure http cookies