F5/Oracle Access Manager - How to manipulate response to remove "httponly" from ObSSOCookie

I was able to remove the httponly from the ObSSOCookie which is set by F5 by looking at the "HTTP_RESPONSE_RELEASE" even... below is my sample irule

when HTTP_RESPONSE_RELEASE {

log all cookies set cookieNames [HTTP::cookie names] foreach aCookie $cookieNames { log local0. "header is: [HTTP::header Set-Cookie]" }

change httponly on a cookie if { [HTTP::header Set-Cookie] contains "ObSSOCookie" } { HTTP::header replace Set-Cookie [string map -nocase {"; httponly" ""} [HTTP::header Set-Cookie]]

}

}