Update cookie.php

Set HttpOnly flag to the cookies to help preventing XSS attacks targeting the cookies holding the clients session token.
Use http on cookies to prevent further XSS
Merge branch 'veromurga-patch-1', Improve security of Cookies.