--- a/pyramid_cubicweb/session.py Tue Jun 30 11:15:54 2015 +0200 +++ b/pyramid_cubicweb/session.py Tue Jun 30 11:15:03 2015 +0200 @@ -28,7 +28,7 @@ path='/', domain=None, secure=False, - httponly=False, + httponly=True, set_on_exception=True, timeout=1200, reissue_time=120,