Disable default features on http-types crate

[link2xt]

By default http-types includes cookie-secure feature and pulls in cookie, aes-gcm, aead and probably other crates. This looks unnecessary when you just want to do some HTTPS GET/POST requests and drop any cookies.

[Swatinem]

Worth mentioning: The problem with those crates is that they have active RUSTSEC advisories (or their transitive dependencies have) and this is blocking to have a passing cargo audit.