test session cookies
The whole point of HttpOnly cookies is that they can't be accessed by JavaScript.
show-cookie
modify-cookie