ServiceStack/ServiceStack — pull request #587 by daggmano (2013-04-11 08:29:45+00:00)
Title: Added AllowNonHttpOnlyCookies as configuration option

To allow for those rare occasions where HttpOnly cookies won't do, I've added a config option to turn the forcing of HttpOnly cookies off. This option is false (HttpOnly forced) by default.