Merge branch '6217-security-set-cookie-settings-to-true-for-option-httponly' into '1.3-fixes'

See merge request fusiondirectory/fd!961