#r-development #security #http-only #xss #cookie