title: Turn off HttpOnly for Flask Session for only one handler
body: <p>I'm using Flask defaults so that HttpOnly is set for the session cookie.</p>
  
  <p>I have one handler for which I'd like to allow JavaScript to access the session cookie.</p>
  
  <p>Is there a way to change the Flask session cookie for a single handler so that HttpOnly is false?</p>
  
  <p>I tried this in my handler:</p>
  
  <pre><code>app.config['SESSION_COOKIE_HTTPONLY'] = False
  rsp = make_response(jsonify(...))
  app.config['SESSION_COOKIE_HTTPONLY'] = True
  return rsp
  </code></pre>
  
  <p>but the cookie still had HTTPONLY set.  It looks like Flask adds the session cookie after making the response.</p>