Using httpOnly session cookie
Merge pull request #510 from AVGP/460-http-only-session-cookie

Using httpOnly session cookie
Merge pull request #1 from mattpass/master

update