Add HttpOnly support to cookie auth
Merge pull request #828 from spumko/issue/807

Add HttpOnly support to cookie auth