Remove incorrect HTTP-only flag.