#http-only #security #r-development