added support for PHP 5.2 'httpOnly' cookies, closes #314