Using httpOnly session cookie
Merge pull request #510 from AVGP/460-http-only-session-cookie

Using httpOnly session cookie