Enable HttpOnly on session cookies

Closes #1721 (closed)

arkindex/project/settings.py

@@ -438,8 +438,6 @@ SESSION_COOKIE_NAME = conf["session"]["cookie_name"]
 SESSION_COOKIE_DOMAIN = conf["session"]["cookie_domain"]
 SESSION_COOKIE_SAMESITE = conf["session"]["cookie_samesite"].value
 SESSION_COOKIE_SECURE = conf["session"]["cookie_secure"]
-# Required for authentication over websockets
-SESSION_COOKIE_HTTPONLY = False
 
 # When a real cache system is available, write the session to the cache
 # and to the database (write-through), so that the backend can immediately checks