Added secure and httponly flags to sysauth cookie in apps_controller.lua

apps_controller.lua uses the same sysauth Set-Cookie code as luci's dispatcher.lua. Per commotion-openwrt issues 32 & 33, sysauth cookie should use httponly and secure flags.