better test of HttpOnly that does not rely on the browser supporting it

fixes broken tests in opera for HttpOnly cookies. see #2664