For cookies :- Disable Trace , httpOnly , Use SSL Cookies , Signed origin