session.cookie_httponly = 1
session.use_only_cookies = 1