fix(cookie): improve security and testing configurations

- Set cookies to be HttpOnly in the `initTest` function

Signed-off-by: appleboy <appleboy.tw@gmail.com>

gofight.go

@@ -434,7 +434,11 @@ func (rc *RequestConfig) initTest() (*http.Request, *httptest.ResponseRecorder)
 
 	if len(rc.Cookies) > 0 {
 		for k, v := range rc.Cookies {
-			req.AddCookie(&http.Cookie{Name: k, Value: v})
+			req.AddCookie(&http.Cookie{
+				Name:     k,
+				Value:    v,
+				HttpOnly: true,
+			})
 		}
 	}