adding option to set the httpOnly on cookie