Add HttpOnly flag to cookies
Merge branch 'master' of gelbman:blop