#shiny #cookies #httpOnly #xss