Public signup for this instance is disabled. Go to our Self serve sign up page to request an account. Report potential security issues privately
Servlet 3.0 provides API for http only cookies, i.e. cookies which are not available to client-side (JS) code. Wicket's CookieDefaults should provide an API to set this flag.