session-cookie-httponly: Allow to disable httponly on CMS session cookies
Merge branch 'release' into master