Set HttpOnly flag on wp_dlm_downloading cookie

Set HttpOnly true to reduce data snooping in XSS attacks.