Sameorigin header

Conflicts:
	manager/index.php
config.inc.php to have setcookie specify httponly
setcookie specify httponly