Make the default HTTP server configuration more secure

tests/standalone/io/http_cookie_test.dart

Index: tests/standalone/io/http_cookie_test.dart
diff --git a/tests/standalone/io/http_cookie_test.dart b/tests/standalone/io/http_cookie_test.dart
index 94c383bceca47071cc515de46605df4f3e1bdeae..3ffb090d50b6436a5ce5c2d96cccaaa0a915a5de 100644
--- a/tests/standalone/io/http_cookie_test.dart
+++ b/tests/standalone/io/http_cookie_test.dart
@@ -42,6 +42,7 @@ void testCookies() {
             var cookiesMap = {};
             response.cookies.forEach((c) => cookiesMap[c.name] = c.value);
             Expect.mapEquals(cookies[i], cookiesMap);
+            response.cookies.forEach((c) => Expect.isTrue(c.httpOnly));
             response.listen(
                 (d) {},
                 onDone: () {