Make the default HTTP server configuration more secure

tests/standalone/io/http_cookie_test.dart

 // Copyright (c) 2013, the Dart project authors.  Please see the AUTHORS file
 // for details. All rights reserved. Use of this source code is governed by a
 // BSD-style license that can be found in the LICENSE file.
 
 import "package:expect/expect.dart";
 import "dart:async";
 import "dart:io";
 
 void testCookies() {
   var cookies = [{'abc': 'def'},
@@ skipping 24 matching lines @@
             cookies[i].forEach((k, v) {
               request.cookies.add(new Cookie(k, v));
             });
             return request.close();
           })
           .then((response) {
             // Expect the same cookies back.
             var cookiesMap = {};
             response.cookies.forEach((c) => cookiesMap[c.name] = c.value);
             Expect.mapEquals(cookies[i], cookiesMap);
+            response.cookies.forEach((c) => Expect.isTrue(c.httpOnly));
             response.listen(
                 (d) {},
                 onDone: () {
                   if (++count == cookies.length) {
                     client.close();
                     server.close();
                   }
                 });
           })
           .catchError((e, trace) {
             String msg = "Unexpected error $e";
             if (trace != null) msg += "\nStackTrace: $trace";
             Expect.fail(msg);
          });
     }
   });
 }
 
 void main() {
   testCookies();
 }