httpOnly

cookieOptions