When running on localhost is there a way to remove “Secure; HttpOnly” from the returned Cookies?

You can't remove httpOnly, but you can remove secure by making sure you pass

http://

in the apiDomain value on the frontend and backend.

Thanks