CHG set cookies to be httponly in order to prevent XSS


git-svn-id: http://svn.resourcespace.org/svn/resourcespace@5538 c08608d7-6e46-0410-86ca-f2a6f1370df5
FIX - check the supplied language is valid in login.php - fixes an XSS vulnerability introduced in r5121


git-svn-id: http://svn.resourcespace.org/svn/resourcespace@5539 c08608d7-6e46-0410-86ca-f2a6f1370df5