[TASK] Mention new default for cookieHttpOnly in NEWS.txt