The Practical Dev's review of Secure your Cookies (Secure and HttpOnly flags)