diff --git a/src/kemal/session.cr b/src/kemal/session.cr
index 4861c11..f971d5e 100644
--- a/src/kemal/session.cr
+++ b/src/kemal/session.cr
@@ -73,7 +73,7 @@ module Kemal
         id = SecureRandom.hex
       end
 
-      ctx.response.cookies[NAME] = id
+      ctx.response.cookies << HTTP::Cookie.new(name: NAME, value: id, http_only: true)
       @id = id
     end