activeweb-132 Add HttpOnly support for cookie