[HttpFoundation] ResponseHeaderBag::clearCookie now accepts secure/httpOnly