The auth cookies are now HTTPonly in tru …

The auth cookies are now HTTPonly in trunk.