Fix for OPENAM-3618 (and also OPENAM-3234) - review: CR-2974
Allowing Java EE agents to set HttpOnly flag on cookies created by the
agent.

git-svn-id: https://svn.forgerock.org/openam/trunk/openam@8184 0f4defcf-c51a-4c67-9f44-6fb5eba73c5d
Fix for OPENAM-3484 - review: CR-3049
Modified logout logic, so it now can also cope with restricted tokens.

git-svn-id: https://svn.forgerock.org/openam/trunk/openam@8185 0f4defcf-c51a-4c67-9f44-6fb5eba73c5d