Server.js: remove cookie setting

Proxy is recommended else use only internally

src/lib/Server.js

@@ -33,9 +33,6 @@ module.exports = class Server {
         secret: crypto.randomBytes(256).toString('hex'),
         resave: true,
         saveUninitialized: true,
-        cookie: {
-          httpOnly: true,
-        },
       }))
 
       .get('/api/release', (Util.promisify(async () => {