enable httpOnly flag

```
enable httpOnly flag for sessionweb

http://stackoverflow.com/questions/36877/how-do-you-set-up-use-httponly-cookies-
in-php
```

Original issue reported on code.google.com by `mcyr...@gmail.com` on 7 Mar 2014 at 12:38
