[Security] Console cookie security problem

### Environment

- Deploy env: all
- Dubbo application version: all
- Registry: all

### Issue description

Here are the security issues find by white hat hackers
1. Pprof is opened to 0.0.0.0
2. Login information is written in cookie, and token is hard coded
3. Cookie is not secureonlyu

### Logs

Click me to check logs

```
Copy logs to here.
```

No files or tests are named. Start by locating the console authentication and cookie-handling entry points, then find how the pprof listener is configured and reproduce the reported exposure. Done should address the three listed findings—pprof exposure, hard-coded or cookie-stored login data, and insecure cookies—with regression coverage where the existing project structure supports it.

Written by the indexing model from the issue text.