Improved the situation with cookies.

Cookies are now served using Gorilla's securecookie package instead of the
session package. This means that cookies will be handled more naturally as
regular cookies (that may be encrypted).
Documented and provided tests for the new cookie handling
Fixed stupid error on redirects
Fixed tests