All session cookies are now HTTPONLY

All session cookies are now HTTPONLY
Merge branch 'next-dev' of https://github.com/NullArgument/hackademic into next-dev