[Jaws_Session_Web]: enabled httpOnly attribute for session cookie