security: make FLASH cookie respect the HttpOnly config parameter
security: make ERRORS cookie respect the HttpOnly config parameter
* fix(TemplateNotFoundException): test template to avoid NullPointerException