Change in ovirt-engine[master]: Revert "backend: set HttpOnly for all cookies"