Merge pull request #24 from ithayer/master …

Allow http-only cookies.