Merge r647395, r660461, r660566, r664330 from trunk:

* Allow Cookie option to set secure and HttpOnly flags

PR: 44799
Submitted by: Christian Wenz <christian wenz.org>
Reviewed by: rpluem



* Handle the case that secure is NULL


* Make setting of HttpOnly flag more explicit.


* Allow HttpOnly, 1 and true to enable HttpOnly, allow secure, 1 and true
  to enable secure.

Submitted by: rpluem
Reviewed by: jim


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@686789 13f79535-47bb-0310-9956-ffa450edef68