#r-development #http-only #xss #cookies