diff --git a/examples/webui-login/web_root/main.js b/examples/webui-login/web_root/main.js
index b16376c7..bd0eb4e2 100644
--- a/examples/webui-login/web_root/main.js
+++ b/examples/webui-login/web_root/main.js
@@ -69,13 +69,13 @@ const App = function () {
       .catch(err => console.log(err));
 
   const login = function (u) {
-    document.cookie = `access_token=${u.token};path=/;max-age=3600`;
+    document.cookie = `access_token=${u.token}; Secure, HttpOnly; SameSite=Lax; path=/; max-age=3600`;
     setUser(u.user);
     return getin();
   };
 
   const logout = () => {
-    document.cookie = `access_token=;path=/;max-age=0`;
+    document.cookie = `access_token=; Secure, HttpOnly; SameSite=Lax; path=/; max-age=0`;
     setUser('');
   };