title: Make ASP.NET_SessionId cookie not httpOnly
body: <p>The cookie used for session in ASP.NET MVC is <code>httpOnly</code> (property set to true).</p>
  
  <p>Is there a way to make it not httpOnly?</p>
  
  <p>I want to be able to access this cookie from javascript.</p>
  
  <p>Even if it is less secure than the "What if all the universe stands against me?!" default setting.</p>