Improve testing of Lily\Middleware\Cookie
Throw away invalid cookie values
Start session in test bootstrap to ensure session cookie set before headers sent by PHPUnit
Call session_start() if not already started

This happens on construction although I could have opted to do it on demand.
Call session_destroy() if no session data held in response