httpOnly default is true
Merge branch 'master' of https://github.com/guotie/msession