Update README.md

packages/universal-cookie/README.md

@@ -52,7 +52,7 @@ Set a cookie value
   - maxAge (number): relative max age of the cookie from when the client receives it in seconds
   - domain (string): domain for the cookie (sub.domain.com or .allsubdomains.com)
   - secure (boolean): Is only accessible through HTTPS?
-  - httpOnly (boolean): Is only the server can access the cookie?
+  - httpOnly (boolean): Is only the server can access the cookie? **Note: You cannot get or set httpOnly cookies from the browser, only the server.**
   - sameSite (boolean|none|lax|strict): Strict or Lax enforcement
 
 ### `remove(name, [options])`