Jetty: Set session cookies to HttpOnly in all webapps

i2psnark: Remove extra mime types in i2psnark web.xml;
added to Jetty's default by now, or in our mime.properties file

apps/i2ptunnel/jsp/web.xml

@@ -32,10 +32,14 @@
         <url-pattern>/wizard</url-pattern>
     </servlet-mapping>
 
+    <!-- this webapp doesn't actually use sessions or cookies -->
     <session-config>
         <session-timeout>
             30
         </session-timeout>
+        <cookie-config>
+            <http-only>true</http-only>
+        </cookie-config>
     </session-config>
     <welcome-file-list>
         <welcome-file>index.html</welcome-file>