KNOX-269: Set JSSESSIONID cookie as HttpOnly and Secure.
Merge remote branch 'origin/apache-ref/master' into baikal-GA-0.4.0