Sameorigin header

Conflicts:
	manager/index.php
config.inc.php to have setcookie specify httponly
setcookie specify httponly
Set secure flag to prevent cookies to be leaked via non encrypted requests.
Revert "setcookie specify httponly"

This reverts commit 337afd123a84b1c53e5337a6c5e36bc47b2376f7.