Implement resigning focus.

This was a too easy fix to let it go.
Cookie Jar: implement CookiesForDom

The DOM is allows to use HttpOnly cookies, unlike JavaScript.
Fixes #10320.