3 ms·Secure + HttpOnly do not expire at 7 days. These are invisible client-side.by dwaite 7y agoSecure + HttpOnly do not expire at 7 days. These are invisible client-side.