HTTP Only Cookie

• Environmental Variable: COOKIE_HTTP_ONLY
• Config File Key: cookie_http_only
• Type: bool
• Default: true

If true, forbids JavaScript from accessing the cookie.