added httpOnly argument to Web.setCookie (fixed issue #1407)

git-svn-id: http://haxe.googlecode.com/svn/trunk@5932 f16182fa-f095-11de-8f43-4547254af6c6