Do not set HttpOnly flag on sticky session cookies.

Chrome does not send HttpOnly cookies over WebSocket handshakes.
Observed on Chrome 25.