Set-Cookie: mycookieval=here; HttpOnly; SameSite=strict