add cookie.httponly bool option.
New bool option "cookie.secure" to set whether cookies should set the secure flag.
make cookie.httponly and cookie.secure options apply to the flash
cookie as well.
Merge pull request #297 from dajohi/master

add cookie.httponly bool option.