Using an httpOnly cookie is not more secure than localStorage | Hacker News Reader