admin session: use HttpOnly as default

git-svn-id: http://www.pimcore.org/svn/pimcore/private/core/trunk@4900 1f8fe7d8-47f0-464c-8d0a-336f4953ab05