path default is /
httponly default true
seuce default not set