Tweaked glassfish-web.xml, jetty-web.xml and weblogic.xml to ensure httponly cookies, and consistent cookie name and path, regardless of the various defaults used by the different app servers