'Returns True if the session cookie should be httponly.  This
currently just returns the value of the ``SESSION_COOKIE_HTTPONLY``
config var.'

def get_cookie_httponly(self, app):

    return app.config['SESSION_COOKIE_HTTPONLY']
