[webapi] Fix python script security for webtestingservice

- Update 4 script to catch exception
- Set "HttpOnly" to all cookies
Merge pull request #290 from haoxli/haoxli/webapi/zap-security-2

[webapi] Fix python script security for webtestingservice