Spring Update links to HttpOnly documentation at OWASP in ResponseCookie

Summary

The link to the "HttpOnly" attribute explanation was leading to a 404 not found error. Updated the link to point to the correct URL: https://owasp.org/www-community/HttpOnly.

Comment From: jhoeller

@sbrannen let's also update that link in 6.0.x and 5.3.x

Comment From: sbrannen

This has been merged into 6.1.x and main.

Thanks