Added lesson HTTPOnly Test

Signed-off-by: Shivam Dixit <shivamd001@gmail.com>