Extract httpOnly cookie in backend

Extract httpOnly cookie in backend where req.header.auth is located in code

Edited by Magnus Lutro Allison