Make the 'ebib' cookie HttpOnly