Minor docstring update for http-only flag

Fix confusing and incorrect definition in docstring for http-only https://www.owasp.org/index.php/HttpOnly