this.secure = secure;
    }

    /**
     * Checks if the cookie is HTTP-only.
     *
     * @return true if HTTP-only
     */
    public boolean isHttpOnly() {
        return httpOnly;
    }

    /**
     * Sets whether the cookie is HTTP-only.
     *
     * @param httpOnly true for HTTP-only cookies
     */