<?php header('Set-Cookie: hidden=value; httpOnly'); ?>