SSDM-6285: also for DSS: setting for all cookies httpOnly=true and secure=true

datastore_server/source/java/ch/systemsx/cisd/openbis/dss/generic/server/DataStoreServer.java

@@ -251,6 +251,8 @@ public class DataStoreServer
                 ServiceProvider.getApplicationContext());
         // Disable URL rewriting (forces container to stop appending ";jsessionid=xxx" to urls)
         // to avoid mistakes in URL parsing by download servlets
+        servletContextHandler.getSessionHandler().getSessionCookieConfig().setHttpOnly(true);
+        servletContextHandler.getSessionHandler().getSessionCookieConfig().setSecure(true);
         servletContextHandler.getSessionHandler()
                 .setSessionIdPathParameterName(null);
         String applicationName = "/" + DATA_STORE_SERVER_WEB_APPLICATION_NAME;