[aerogear-issues] [JBoss JIRA] (AEROGEAR-717) Enforce the "HTTPOnly" flag, if If the application doesn't need to access the cookie