Update HttpOnlySessionCookieFilter.java

Prevent serialization, deserialization and cloning