Sets this's HttpOnly attribute to http_only.
If true, this will be marked as "http only", meaning it should not be exposed to web page
scripts or other untrusted code.
| this |
a Cookie |
| http_only |
the new value for the HttpOnly attribute |