closes #241 by adding HttpOnly cookie to true in web.xml
Merge pull request #567 from denimgroup/bugfix-tfgh241-add-httponly-cookie

closes #241 by adding HttpOnly cookie to true in web.xml