We are using the improved Automatic Package Restore process to restore missing NuGet packages.

When building, the Restore dialog pops up as it starts to download from the package sources, which is correct:



I can see that the packages are being restored into the packages folder, but it doesn't finish restoring all of them.  I get the following kind of errors:

Error   10  NuGet Package restore failed for project MyProject: System.InvalidOperationException: Unable to find version '6.0.1' of package 'Newtonsoft.Json'.
   at NuGet.PackageHelper.ResolvePackage(IPackageRepository repository, String packageId, SemanticVersion version)
   at NuGet.VsEvents.PackageRestorer.RestorePackage(PackageReference package)
   at NuGet.VsEvents.PackageRestorer.RestorePackages(String packageReferenceFileFullPath, IFileSystem fileSystem)
   at NuGet.VsEvents.PackageRestorer.PackageRestore(ProjectPackageReferenceFile projectPackageReferenceFile).


Could this be because I have multiple package sources?  



NuGet may be searching in our private package source for the 'Newtonsoft.Json', for example, and not in the nuget.org source.

The .nuget/NuGet.config file:

&lt;configuration&gt;
  &lt;packageSources&gt;
    &lt;add key="nuget.org" value="https://www.nuget.org/api/v2/" /&gt;
    &lt;add key="private" value="http://privatePackageSource.com/nuget" /&gt;
  &lt;/packageSources&gt;
  &lt;solution&gt;
    &lt;add key="disableSourceControlIntegration" value="true" /&gt;
  &lt;/solution&gt;
&lt;/configuration&gt;


We are using Visual Studio 2013 and NuGet 2.8.5.

EDIT:

Using Fiddler, I have confirmed that NuGet is indeed searching for the packages in the incorrect source.  It is requesting the following packages from my private repository.

I also read this post and added the activePackageSource section to the NuGet.config file:

&lt;configuration&gt;
  &lt;packageSources&gt;
    &lt;add key="nuget.org" value="https://www.nuget.org/api/v2/" /&gt;
    &lt;add key="private" value="http://privatePackageSource.com/nuget" /&gt;
  &lt;/packageSources&gt;
  &lt;activePackageSource&gt;
    &lt;add key="All" value="(Aggregate source)" /&gt;
  &lt;/activePackageSource&gt;
  &lt;solution&gt;
    &lt;add key="disableSourceControlIntegration" value="true" /&gt;
  &lt;/solution&gt;
&lt;/configuration&gt;


But it doesn't fix the problem.


Question: How can I enable HttpOnly cookies in EE
Answer: For anyone else coming across this, ExpressionEngine 2.8.0 introduced a new config variable for httponly cookies, and it's set to 'yes' by default: http://ellislab.com/expressionengine/user-guide/general/system_configuration_overrides.html#cookie-httponly-config