`iisnode.session.cookie` has neither `HttpOnly` nor `Secure` attribute. <img width="638" alt="image" src="https://github.com/Azure/iisnode/assets/1381907/73115584-1468-40a0-8054-24734f4b5479"> Related code https://github.com/Azure/iisnode/blob/master/src/iisnode/cnodeprocessmanager.cpp#L214-L221