set a 1 hour expiration on the http session
support for selective (based on url accessed) expiration of cookies
added a comment re: Katello::UrlConstrainedCookieStore#call origins
added comment in session_store initializer pointing to environment-specific initializers instead.
removed a trailing space
moved tests to a more visible spot in the test suite
fixes based on comments in the PR