title: How exactly do you configure httpOnlyCookies in ASP.NET?
body: <p>Inspired by this CodingHorror article, "<a href="http://www.codinghorror.com/blog/archives/001167.html" rel="noreferrer">Protecting Your Cookies: HttpOnly</a>"</p>
  
  <p>How do you set this property? Somewhere in the web config?</p>