public CookieBuilder httpOnly(boolean httpOnly) {
        this.httpOnly = httpOnly;
        return this;
    }
Sets whether the {@link Cookie} is HTTP only. If {@code true}, the {@link Cookie} cannot be accessed
by a client side script. However, this works only if the browser supports it. For more information,
please look <a href="http://www.owasp.org/index.php/HTTPOnly">here</a>. If unspecified, {@code false}
will be used.
core/src/main/java/com/linecorp/armeria/common/CookieBuilder.java