diff --git a/conf/jetty/webdefault.xml b/conf/jetty/webdefault.xml
index a4b1fa8..04d6374 100644
--- a/conf/jetty/webdefault.xml
+++ b/conf/jetty/webdefault.xml
@@ -354,8 +354,13 @@
 
 
   <!-- ==================================================================== -->
+
   <session-config>
     <session-timeout>5</session-timeout>
+    <cookie-config>
+      <http-only>true</http-only>
+      <secure>true</secure>
+    </cookie-config>
   </session-config>
 
   <!-- ==================================================================== -->
diff --git a/conf/jetty/webdefault.xml.production b/conf/jetty/webdefault.xml.production
index 722b046..b64e748 100644
--- a/conf/jetty/webdefault.xml.production
+++ b/conf/jetty/webdefault.xml.production
@@ -370,8 +370,13 @@
 
 
   <!-- ==================================================================== -->
+
   <session-config>
     <session-timeout>5</session-timeout>
+    <cookie-config>
+      <http-only>true</http-only>
+      <secure>true</secure>
+    </cookie-config>
   </session-config>
 
   <!-- ==================================================================== -->