ServiceStack/ServiceStack — pull request #413 by gixug (2013-01-24 00:37:14+00:00)
Title: Set HttpOnly to true to protect cookies

This is a re-submit of #408, which rightly suggests that all cookies should be set as HttpOnly by default.