Suggestion of support of setting http-only cookies.

[学神之女]

I've read /src/Mvc/Response.php and found that no options to set http-only cookies. Http-only cookies are securer in some situations.