Groovy : Cookie: not HttpOnly