* Sets whether the user identification cookie should be HTTP-only.
     *
     * @param httpOnly true if the cookie should be HTTP-only (not accessible via JavaScript), false otherwise
     */
    public void setCookieHttpOnly(final boolean httpOnly) {
        this.httpOnly = httpOnly;
    }