Imported javascript file leaks an httpOnly cookie set by this page.