[http] use http-only cookies
[samba] fixed password setter
Merge branch 'next'
bump