See aio-libs/aiohttp-session#396 for the context.

Implementation thoughts:

1. .cookies property is also needed
2. set_cookie() and del_cookie() should update headers immediately, HTTPException has no .prepare() method and should not have it.
3. Backport is not needed, in 3.x HTTPException is derived from Response and have all mentioned methods already.