make cookies http-only, allow to set secure and domain#150

frikky merged 5 commits intoShuffle:mainShuffle/shuffle-shared:mainfrom

P4sca1:cookie-securityP4sca1/shuffle-shared:cookie-securityCopy head branch name to clipboard