Made cookie httpOnly=false