oktw
says to
#ysitd
<mmis1000>: 至少有一扁很重要，cookie一定要httponly