Fix HttpOnly cookies flag in Zap.