Rewrite IIS appsession cookie with httponly attribute

[duncan hall]

For PCI compliance I need to add the httponly cookie attribute to the 
appsession cookie set by IIS 6.0.  Any thoughts on how I could accomplish the 
rewriting of this cookie using haproxy?

Regards,

Duncan