Update $httpOnly param to false