#http-only #xss #cookie #shiny #r-shiny