security: make FLASH cookie respect the HttpOnly config parameter
security: make ERRORS cookie respect the HttpOnly config parameter
fix typo in XML parser feature uri
Merge pull request #812 from codeborne/fix-xml-parser-feature-typo

play 1.3.x is broken: fix typo in XML parser feature uri
Merge pull request #811 from codeborne/cookies-httponly

Respect HttpOnly setting for FLASH and ERRORS cookies