Set HTTP Session Cookie as HTTP Only.
Merge pull request #6 from ffbit/http-only-session-cookie

Set HTTP Session Cookie as HTTP Only.