TypeScript : Cookie: not HttpOnly