set httponly to remember_me's cookie

给 cookies[:remember_token] 设置httponly，防止潜在的Cookie Theft攻击。