title: Tomcat 7 - HTTPOnly - Bad Set-Cookie header - No '=' found for token
body: <p>I found an issue in a client using Tomcat 7.0.50.</p>
  
  <p>It says, while consuming a java WebService from SoapUI:</p>
  
  <pre><code>status HTTP 500 - javax.servlet.ServletException: java.lang.RuntimeException: 
  Bad Set-Cookie header: JSESSIONID=CDB8F6AAE5CF6DF2FD70359DFF4B7725; Path=/geotrib/; HttpOnly
  No '=' found for token starting at position 61(-10001)
  </code></pre>
  
  <p>In Tomcat 6 this does not happens, because "httponly" is true by default in tomcat 7.</p>
  
  <p>But how can this be? We are getting this error on the very Tomcat that writes the flag.</p>
  
  <p>Any help is much appreciated.</p>
  
  <p>Best regards,
      Federico.</p>