o See http://www.owasp.org/index.php/HTTPOnly for a description of the
  attribute.
  
o Patch from Stephan Hofmockel via https://bugs.launchpad.net/zope2/+bug/367393