Adding httpOnly flag to Cookie JSON object