update webdefault.xml to web-app_3_0.xsd (from 2.5) and set cookies to be http-only by default
added codehale's ThreadDeadlockHealthCheck as a default HealthCheck.