Update CONTRIBUTING.md

Replace the Apache references with IIS.

Close h5bp/server-configs-iis#4.
Added httpCookies config

Added httpCookies config which covers setting HttpOnly flag, requiring
SSL for cookies and setting domain for cookies
https://www.owasp.org/index.php/HttpOnly