I am using JBoss 4.2.1 application server. I want to add secure flag and http only attributes to SET-COOKIE response header. So I have written a filter to do that. When I start the server and hit the page, The response header is not appering, But when ever I refresh the page I am able to see the header. What Would be the problem?