Robert, As one of the devs on the libapreq2 project I came across your patch for HttpOnly cookie support submitted to Debian in 2008:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=490862 It looks great, and we'd like to apply it to the upstream package at Apache. Would you mind following up to this post with your permission to apply the patch? Thanks!