How do I set the session cookie's HttpOnly setting to false? How do I set the session cookie's HttpOnly setting to false? ruby-on-rails ruby-on-rails