Remove user's post tests
Set cookie httpOnly to true