Update HttpOnlySessionCookieFilter.java

Make the class final to avoid subclassing