Adds handling of HttpOnly when converting NewCookie to string suitable for HTTP Set-Cookie header