A Minion plugin that detects whether Set-Cookie has HttpOnly and secure flags set properly.