fix(auth): move admin session to HttpOnly cookies

yshop-drink-boot3/yshop-server/src/main/resources/application-local.yaml

@@ -192,6 +192,7 @@ yshop:
     enable: false # 本地环境，暂时关闭图片验证码，方便登录等接口的测试；
   security:
     mock-enable: true
+    cookie-secure: false
   xss:
     enable: false
     exclude-urls: # 如下两个 url，仅仅是为了演示，去掉配置也没关系