CookiePolicyOptions – HttpOnly and Secure – what is the effect of these settings? Ours is a .Net core 2.2 web service application.