add cookie.httponly bool option.

add cookie.httponly bool option.