#cookie "#cross-site scripting" #r-shiny #http-only