64cf176bef
The HTTP only flag protects the session cookies from cross-site scripting. Change-Id: Iec07b3b447051726ce218e5f31c8bf583731a90c