Add HttpOnly to Set-Cookie header.

git-svn-id: http://svn.zoo-project.org/svn/trunk@442 4b6b6ad6-68b3-4dcc-9231-bd9b83bc5dc3