Added support for HttpOnly cookies. Ref https://www.owasp.org/index.php/HttpOnly.