Support httponly flag.
Tests for cookie attrs.
Merge pull request #13 from hsw/master

Support httponly flag.