Enable CASHttpOnly by default
Merge pull request #76 from pames/master

Enable CASHttpOnly by default