Revert "backend: set HttpOnly for all cookies"

This reverts commit 98ae6ba19da5aee35004427dee273ef2d0a8d4e9.

Change-Id: I4a57ea0f9d04e8e8d38af27b7949e1ffdaacda8c
Signed-off-by: Roy Golan <rgolan@redhat.com>