#http-only #webdev #xss #cookie #r-shiny