Merge pull request #321 from ztmr/master

WebSockets: callback arity fix for service handler
Support for Secure & HttpOnly session cookie flags;