Commands

document.cookie = 'name=value; max-age=3600; secure'

HttpOnly: if true, client script can't access it (default: false)
Secure: Send only on HTTPS