#http-only #xss #webdev #cookies #r-shiny