Remove http only

Author: trueleo

server/src/handlers/http/oidc.rs

@@ -190,7 +190,6 @@ fn return_to_client(url: &str, cookies: impl IntoIterator<Item = Cookie<'static>
 
 fn cookie_session(id: Ulid) -> Cookie<'static> {
     let authorization_cookie = Cookie::build("session", id.to_string())
-        .http_only(true)
         .max_age(time::Duration::days(COOKIE_AGE_DAYS as i64))
         .same_site(SameSite::Strict)
         .path("/")
@@ -200,7 +199,6 @@ fn cookie_session(id: Ulid) -> Cookie<'static> {
 
 fn cookie_username(username: &str) -> Cookie<'static> {
     let authorization_cookie = Cookie::build("username", username.to_string())
-        .http_only(true)
         .max_age(time::Duration::days(COOKIE_AGE_DAYS as i64))
         .same_site(SameSite::Strict)
         .path("/")