Backport of Make cookies HttpOnly and obey COOKIE_SECURE flag (#4706) #4707
+26
−25
We went looking everywhere, but couldn’t find those commits.
Sometimes commits can disappear after a force-push. Head back to the latest changes here.