version 0.1.13 of scalatra cookie lib

respects httpOnly flag