Add an ability to set HttpOnly and Secure cookies

[YuriyDurov]

Add an ability to set HttpOnly and Secure cookie flags when working with HttpContextCookieService. An attempt at setting any of these flags in BrowserCookieService should cause an exception to be thrown as this functionality is not available to JS