--- a/pyramid_cubicweb/session.py Tue Jun 30 11:15:54 2015 +0200
+++ b/pyramid_cubicweb/session.py Tue Jun 30 11:15:03 2015 +0200
@@ -28,7 +28,7 @@
path='/',
domain=None,
secure=False,
- httponly=False,
+ httponly=True,
set_on_exception=True,
timeout=1200,
reissue_time=120,