Set HttpOnly for cookies using :http_only
Merge pull request #583 from gshutler/cookie-http-only

Set HttpOnly for cookies using :http_only