Fix confusing and incorrect definition in docstring for http-only https://www.owasp.org/index.php/HttpOnly