diff --git a/lib/units/app/index.js b/lib/units/app/index.js
index ebd92063..049bfc14 100644
--- a/lib/units/app/index.js
+++ b/lib/units/app/index.js
@@ -72,6 +72,7 @@ module.exports = function(options) {
   app.use(cookieSession({
     name: options.ssid
   , keys: [options.secret]
+  , httpOnly: false
   }))
 
   app.use(auth({