Set the httpOnly Cookie Flag in Express to Ensure Cookies are Inaccessible from JavaScript by Mike Sherov