I've read `/src/Mvc/Response.php` and found that no options to set http-only cookies. Http-only cookies are securer in some situations.