spring-boot can't get hazelcast.sessionId cookie with secure and http-only

Question

Using spring-boot 2.17 with hazelcast 3.11 and tomcat 9.0.39.

I have set a WebFilter bean:

    @Bean
    public WebFilter webFilter(HazelcastInstance h