We're not using any of Java 7 features, so let's make the binary 1.6 compatible
Make session cookies http only and introduce initial support for cookie attributes
Code cleanup