Cookies are now set as httponly and can not be read by javascript

please review
Maybe your *next-dev* branch is not up to date?