Merge #16611: BaseCookie now parses 'secure' and 'httponly' flags.