Fix setting httponly.