add httponly and secure attributes to ckfinder appcfc